gh0strat | 9dd8dfb931072d6e3749a2bdca56fcd2958e98ebd6c224848b80136c3858e50d

General

Target

9dd8dfb931072d6e3749a2bdca56fcd2958e98ebd6c224848b80136c3858e50d
Size

109KB
MD5

19a5c369a6b48de1d559f0fe915fd6ff
SHA1

65c36ac9b66f7471ea75db0913397269cf0ff0d9
SHA256

9dd8dfb931072d6e3749a2bdca56fcd2958e98ebd6c224848b80136c3858e50d
SHA512

0043b661a3017261077620060682829b2f7807914e20d0d6b011ebbe09e04e8582c24066bf895c8fded7b77d25fee727b7ff4f733ad4551bda4acc46849947f5
SSDEEP

1536:PF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zR:PF6F15h/zIn5S1aj+cU9CEw9aINejR

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9dd8dfb931072d6e3749a2bdca56fcd2958e98ebd6c224848b80136c3858e50d

9dd8dfb931072d6e3749a2bdca56fcd2958e98ebd6c224848b80136c3858e50d
.exe windows:6 windows

Headers