General

  • Target

    9d4fb437ac38f2a3571c9148d85057c0N

  • Size

    28KB

  • MD5

    9d4fb437ac38f2a3571c9148d85057c0

  • SHA1

    038555be8952b2ef0560c48b16a2c46ff81431fe

  • SHA256

    1d6f5096c71b510403e8f5d4e8d3cc25c471593269e97324cd4962abc8375e61

  • SHA512

    15b410352bbb5e91590e22564a5b33225a2d82dd5e5db63c9994dbc673232c728c57ad75440f5436034a8422be8a7f2acfa6bb73cb4778ab5500a6e4407b4394

  • SSDEEP

    384:V5WcZrGqjvNQAfBbwOX24+SzDARaBULmIGHIgzet6uFt3twsoFuRT+1TaD2qX:2IqavNQMJ3tnPARYPId6uLPqgT+1TapX

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9d4fb437ac38f2a3571c9148d85057c0N
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections