Overview

overview

10

Static

static

10

89e62e87ad...18.exe

windows7-x64

10

89e62e87ad...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89e62e87ad3c64d9bb8cdb2c2fadc0e2_JaffaCakes118

  • Size

    239KB

  • MD5

    89e62e87ad3c64d9bb8cdb2c2fadc0e2

  • SHA1

    855f63c4210610c2694484165c60771caed9bd27

  • SHA256

    be851aba72e2bbecfacda2365ea7e632c2e4df647dbd2edb2b807cc1b99561df

  • SHA512

    9959385f0bef339d831eadcbf37a1083a45ab416699c5818ee6e2f836c664cef023ba80899e9c5162aca8bbf758c61e7a819041b29f85c8086f7422ef34e4481

  • SSDEEP

    6144:nGzRxSVtp0l6whGfsKR+zkBpTaa5tJHUsU:Gt0VPFfsKAkrbPlUz

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 89e62e87ad3c64d9bb8cdb2c2fadc0e2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections