gh0strat | 213f01552abb00d7e76953a60bcaaf23222607ae8e9333165e656d462f29d091

General

Target

213f01552abb00d7e76953a60bcaaf23222607ae8e9333165e656d462f29d091
Size

109KB
MD5

4dbf8ec23c5f8babd1b5b23b0b4a434c
SHA1

b7af986712cbaea7d9046e8d9021c9f60bda2a25
SHA256

213f01552abb00d7e76953a60bcaaf23222607ae8e9333165e656d462f29d091
SHA512

86d14faf3570f657fe99738cae5522fa606f7b9c6cbac13b5f5ca450badb24a93fd2e5da094311cf444344d02f19afa60b4874cef824028076a8b02b4eb869e2
SSDEEP

1536:ZF6FQ85LFiGkSzyqzin5SP9cljcfcU9C85Mw9aINe3zn:ZF6F15h/zIn5S1aj+cU9C85Mw9aINejn

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213f01552abb00d7e76953a60bcaaf23222607ae8e9333165e656d462f29d091

213f01552abb00d7e76953a60bcaaf23222607ae8e9333165e656d462f29d091
.exe windows:6 windows

Headers