General

  • Target

    0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee

  • Size

    109KB

  • MD5

    ef944c1328478ba0ea1faaf38fe390db

  • SHA1

    d1bcc59a966d1cf995979be646e0958a9eec2f08

  • SHA256

    0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee

  • SHA512

    0b0cdf09e107bb7bfd02e22e017f163ffb0e06ba35831030a661877095eda48c68d7fd96b0afaf08fd2a7fe7645efbe19108004959b803a55b4095e4f8e79450

  • SSDEEP

    3072:4aF6F15h/zIn5S1aj+cU9C82Mw9aINej+:QFjhLI5SG+F69aIAC

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cfa5ebda2c392a7dd1ef71d152d0b61a528ff1ff151123c039a02309ededaee
    .exe windows:6 windows


    Headers