Overview

overview

10

Static

static

10

520020dee5...0N.dll

windows7-x64

10

520020dee5...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    520020dee5174a49b2a0b8551beee780N.exe

  • Size

    197KB

  • MD5

    520020dee5174a49b2a0b8551beee780

  • SHA1

    c421f3ddfda2573d67a853b703c7b8fe940373c7

  • SHA256

    ed30406e05419f2fb1231815fce6e2852ccb86d5f6ec0518c4adff00cca5c094

  • SHA512

    f06a02a9e5fdf4f76798f1390a735ce5905cd9d37ca3f587df7986b8d3b6e8e86b8ca8c4802f00d89698cec5bbfc3ef1a5f8b5879bf768a3ad2cb0aa58605087

  • SSDEEP

    3072:yXYUfQpHT4QNoiifqBSg22rGHTVNzllqwiSVcBc8cAv2cOb+ZezQSXMivAc/48fa:yXQT4QyfnggxUsVKcY2BserXMmAZ3

Score
10/10
upxgh0strat

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 520020dee5174a49b2a0b8551beee780N.exe
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections