gh0strat | 86bb4bddb9d0b482ab938d0b08dc1645e9375311d820b6f3eb5c4da5e51142f8

General

Target

86bb4bddb9d0b482ab938d0b08dc1645e9375311d820b6f3eb5c4da5e51142f8
Size

109KB
MD5

ad98a8d6aa899a9750adb042ef29baa7
SHA1

39399756d411115750e5e2423c1cca0bed6e7683
SHA256

86bb4bddb9d0b482ab938d0b08dc1645e9375311d820b6f3eb5c4da5e51142f8
SHA512

1242de8ef613d427fe6765c224a41b1da449f9db6d924c349c47cf3f3b806f0a07064fdaba64682ad4a4c03173d3895ca8bd6a678be2f33919da80d7d292ea7e
SSDEEP

1536:mfAF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zS:mfAF6F15h/zIn5S1aj+cU9CEw9aINejS

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86bb4bddb9d0b482ab938d0b08dc1645e9375311d820b6f3eb5c4da5e51142f8

86bb4bddb9d0b482ab938d0b08dc1645e9375311d820b6f3eb5c4da5e51142f8
.exe windows:6 windows

Headers