gh0strat | 500fd946dfa25adad228cc512a643ff09d2a3142e623c0dd76605a7a68d84ef4

General

Target

500fd946dfa25adad228cc512a643ff09d2a3142e623c0dd76605a7a68d84ef4
Size

109KB
MD5

48a7deae85c66ffe4bbbc765c35faca4
SHA1

4ade7c3840bc293498c6e0ef54a4106a31096ef6
SHA256

500fd946dfa25adad228cc512a643ff09d2a3142e623c0dd76605a7a68d84ef4
SHA512

893109436f9cc581aa000b736c38ffd411e2894267c3c4c63582659912de9f2cee95e8196e91c15ea055402d021b3d743c62727c6d5459a402eba654038b4422
SSDEEP

1536:xF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zn:xF6F15h/zIn5S1aj+cU9CEw9aINejn

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
500fd946dfa25adad228cc512a643ff09d2a3142e623c0dd76605a7a68d84ef4

500fd946dfa25adad228cc512a643ff09d2a3142e623c0dd76605a7a68d84ef4
.exe windows:6 windows

Headers