General

  • Target

    eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d

  • Size

    109KB

  • MD5

    99f98a732b0b4dc96eab20a9b2f35b84

  • SHA1

    209a64ae9c91175846123e0a2b5c263ff2614a19

  • SHA256

    eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d

  • SHA512

    4d393ea8f2d9ddb4089598da3313ea0a6c0c93c19cb87c593663a8a89f028db08868fe7bd9fe87217d7c87298060103fbb071acf31dfb03cb62ce1795b66934c

  • SSDEEP

    1536:5F6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zR:5F6F15h/zIn5S1aj+cU9CEw9aINejR

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb1385f15b88d819fe42d77fca7c8b0cfb98d91f59dbd293faed9c903c14408d
    .exe windows:6 windows


    Headers