gh0strat | cf42096fe4855469126cfadaf2e84743c3c935eef7962e6f5e2cfb6075148124

General

Target

cf42096fe4855469126cfadaf2e84743c3c935eef7962e6f5e2cfb6075148124
Size

109KB
MD5

67483bfbc403d137bed03f7881b154a2
SHA1

09c263156a32133923d6de07d2a240f86fc2d486
SHA256

cf42096fe4855469126cfadaf2e84743c3c935eef7962e6f5e2cfb6075148124
SHA512

99e12211b732cc7c9dabca48b32e30488c9c001ca7cf9f1ee928e2dac8746e0bf2816c0e8f119caac0ca716ca670fda55a445a38f51cf0add170a67c8a5bc2d7
SSDEEP

1536:CF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zi:CF6F15h/zIn5S1aj+cU9CEw9aINeji

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf42096fe4855469126cfadaf2e84743c3c935eef7962e6f5e2cfb6075148124

cf42096fe4855469126cfadaf2e84743c3c935eef7962e6f5e2cfb6075148124
.exe windows:6 windows

Headers