gh0strat | cf89655130a881983cda612eccbc8448a8fec8085b8e64102ba786225200b103

General

Target

cf89655130a881983cda612eccbc8448a8fec8085b8e64102ba786225200b103
Size

109KB
MD5

84764e6b6f5f782d4264df00aee162af
SHA1

577d5d940a5d1bd548860e8ba00478b05e980279
SHA256

cf89655130a881983cda612eccbc8448a8fec8085b8e64102ba786225200b103
SHA512

3e29dd4c013d23eae56491398087cc96109cbb0b078006e6e965e7809eea0bf275fb253fff97d46cb6e91a2c24953260fcaa158d84a5104a2a87c553cad8bed4
SSDEEP

1536:yVF6FQ85LFiGkSzyqzin5SP9cljcfcU9CJgGw9aINe3zj:6F6F15h/zIn5S1aj+cU9CJgGw9aINejj

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf89655130a881983cda612eccbc8448a8fec8085b8e64102ba786225200b103

cf89655130a881983cda612eccbc8448a8fec8085b8e64102ba786225200b103
.exe windows:6 windows

Headers