gh0strat | af5a7bc4e34c7ef186341e74497da024def7080faf073450bff7a8366bc92d7d

General

Target

af5a7bc4e34c7ef186341e74497da024def7080faf073450bff7a8366bc92d7d
Size

109KB
MD5

916b95875f4a21738a861e36c2f1ee19
SHA1

a0e14c697dfe0259132430e019db2378b60ad41b
SHA256

af5a7bc4e34c7ef186341e74497da024def7080faf073450bff7a8366bc92d7d
SHA512

779203905a50acb08842e540ca0ac2ca3754f31ce3a58a98012c983de408d6dfaf53fbe32cd6b6deede2d61bd3b782e40abb4ecd2fe4f9234a80656c579a0ad7
SSDEEP

1536:OF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zF:OF6F15h/zIn5S1aj+cU9CEw9aINejF

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af5a7bc4e34c7ef186341e74497da024def7080faf073450bff7a8366bc92d7d

af5a7bc4e34c7ef186341e74497da024def7080faf073450bff7a8366bc92d7d
.exe windows:6 windows

Headers