gh0strat | 85170fb77e1a5a03baa891dbb5c46d2691d242df5b59ff3c7c8f52f507046dd5

General

Target

85170fb77e1a5a03baa891dbb5c46d2691d242df5b59ff3c7c8f52f507046dd5
Size

109KB
MD5

3b4a2af32a74f7889f7e6683030fe886
SHA1

39511708ffb07e92dcf81d1ade6411504726a289
SHA256

85170fb77e1a5a03baa891dbb5c46d2691d242df5b59ff3c7c8f52f507046dd5
SHA512

e059f28d765511aa41c6d46780c033257f35a1f3d4afde444bb59b2d0f4fe102ce7bfd49ee0bd361a7fcc053f502db3412e8ccb16b7559a017b50d69a166fd9d
SSDEEP

1536:0F6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zx:0F6F15h/zIn5S1aj+cU9CEw9aINejx

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85170fb77e1a5a03baa891dbb5c46d2691d242df5b59ff3c7c8f52f507046dd5

85170fb77e1a5a03baa891dbb5c46d2691d242df5b59ff3c7c8f52f507046dd5
.exe windows:6 windows

Headers