gh0strat | 7d3419fa97b4db549942954b5c851a4da72c984942916adbaeea6728e437b6a4

General

Target

7d3419fa97b4db549942954b5c851a4da72c984942916adbaeea6728e437b6a4
Size

109KB
MD5

dc715f617a41ddc7bd2b5c6b66c20c74
SHA1

b6f688f180a3b3e746c8b77b001d1ac41d90ad1e
SHA256

7d3419fa97b4db549942954b5c851a4da72c984942916adbaeea6728e437b6a4
SHA512

cc803c749cb303a8c8b2de0132a2b0622fe42b3df4997bf2383fe06250d92d3181466c48bfc045a511d34ec97f853861a61efd4d84443c6204c6853c271e1321
SSDEEP

1536:2h3F6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zE:OF6F15h/zIn5S1aj+cU9CEw9aINejE

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d3419fa97b4db549942954b5c851a4da72c984942916adbaeea6728e437b6a4

7d3419fa97b4db549942954b5c851a4da72c984942916adbaeea6728e437b6a4
.exe windows:6 windows

Headers