Overview

overview

10

Static

static

10

172b293243...06.dll

windows7-x64

10

172b293243...06.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    172b293243e4ec59e0ed3c9af9e254f1d6d580b02d378a385e7c08673a0e9106

  • Size

    443KB

  • MD5

    c27844b7a432d26f4456ed779c6783d6

  • SHA1

    e5ad95d3611161023f84ed503c75de183e9a66da

  • SHA256

    172b293243e4ec59e0ed3c9af9e254f1d6d580b02d378a385e7c08673a0e9106

  • SHA512

    92657a93e3e55ae3d26d3a508a043c33fdc7f30610dad939a24e946fb34d566c3956b6cda1e6c8fa2a820017a2a9a4ff0735240538b589531e263c39d4cdf052

  • SSDEEP

    12288:e6oae5erODhNvfchaB6oae5erODhNvfchV:e605erwNvUhY605erwNvUhV

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 172b293243e4ec59e0ed3c9af9e254f1d6d580b02d378a385e7c08673a0e9106
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections