gh0strat | bf0fd0339de7e6388a9b0fcc3b7505441d46ea521aac3005ed26cfae4d30fc2e

General

Target

bf0fd0339de7e6388a9b0fcc3b7505441d46ea521aac3005ed26cfae4d30fc2e
Size

109KB
MD5

6a879120070ce5982390e65c41ebb8fe
SHA1

54c851ffaaebbfb73a80e413ba3f513b94458e65
SHA256

bf0fd0339de7e6388a9b0fcc3b7505441d46ea521aac3005ed26cfae4d30fc2e
SHA512

ea204ee904439e933efb6052f7eff22b016644865c1045e192d65363e9e4093c21952f20ea41db3f4e282f58ffef0211829883c5c96bf6ec808c74e020865dc0
SSDEEP

1536:fF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zn:fF6F15h/zIn5S1aj+cU9CEw9aINejn

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf0fd0339de7e6388a9b0fcc3b7505441d46ea521aac3005ed26cfae4d30fc2e

bf0fd0339de7e6388a9b0fcc3b7505441d46ea521aac3005ed26cfae4d30fc2e
.exe windows:6 windows

Headers