gh0strat | 9dacdbd3e6d59e397b6686d359f5937fdc46863f660cdca1e6e073046a274935

General

Target

9dacdbd3e6d59e397b6686d359f5937fdc46863f660cdca1e6e073046a274935
Size

1.5MB
MD5

e5a96fcfb99e58dd81824c4110e2695a
SHA1

e773648259ccb5d2600caa8b2830dc73752c4291
SHA256

9dacdbd3e6d59e397b6686d359f5937fdc46863f660cdca1e6e073046a274935
SHA512

f7df854912b5280fdd6f69f7cd7650ebf4d431951e6fadd64ff4719fef0cabf5f63647717a8c15c7fdf6ee95d4b07327eb2d551a1d8f158ed2518b1924d1eef5
SSDEEP

24576:7MfywgIt/65Fu99573/aiVIOYrFzpCM5hyv3m8AMtRyce0LvOK0B:l49ry

Score

10^/10

Detect PurpleFox Rootkit 1 IoCs

Detect PurpleFox Rootkit.

resource	yara_rule
sample	purplefox_rootkit

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9dacdbd3e6d59e397b6686d359f5937fdc46863f660cdca1e6e073046a274935