gh0strat | 8c4b9e92001f23212849e11660a8c097b42d07692064a52dd5d2ca71d96573ae

General

Target

8c4b9e92001f23212849e11660a8c097b42d07692064a52dd5d2ca71d96573ae
Size

109KB
MD5

4d020b9abb7f1aa1e92feb94e1a87688
SHA1

ab5c562915343e845f188b88917efd451283f63b
SHA256

8c4b9e92001f23212849e11660a8c097b42d07692064a52dd5d2ca71d96573ae
SHA512

0d9512a466e2eb9512c57ea7d7b61bcdc7455e3a406c462f1321b02d493765cfd038c849745d91cbe60827e0d6d99a7a94b7511a22839efd62f3fb5625aed399
SSDEEP

1536:mF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3zh+:mF6F15h/zIn5S1aj+cU9CEw9aINejh+

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c4b9e92001f23212849e11660a8c097b42d07692064a52dd5d2ca71d96573ae

8c4b9e92001f23212849e11660a8c097b42d07692064a52dd5d2ca71d96573ae
.exe windows:6 windows

Headers