gh0strat | 5a63aa1ba507db56c826b4b85967c271ed125b77dcbee7f0d2f962c6fbf668ae

General

Target

5a63aa1ba507db56c826b4b85967c271ed125b77dcbee7f0d2f962c6fbf668ae
Size

109KB
MD5

4d5a69441a59199f850e6a9b55c394ac
SHA1

c610b672cd1f2fb66412364a1927b96fdb87297b
SHA256

5a63aa1ba507db56c826b4b85967c271ed125b77dcbee7f0d2f962c6fbf668ae
SHA512

3f1cce7f47f54c69157191fa7ad2c3bfc9e85f26a3258b8941393c80a7d41b3a06ed5d8091bd68d8a8c43b5974cb2e0055793d00df5e64cfd9edba33361900bc
SSDEEP

1536:PF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zR:PF6F15h/zIn5S1aj+cU9CEw9aINejR

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a63aa1ba507db56c826b4b85967c271ed125b77dcbee7f0d2f962c6fbf668ae

5a63aa1ba507db56c826b4b85967c271ed125b77dcbee7f0d2f962c6fbf668ae
.exe windows:6 windows

Headers