gh0strat | 27e4f95ba9fcad3508b1240f2bf824d0163bb22211c42a9cd16449f8bf780208

General

Target

27e4f95ba9fcad3508b1240f2bf824d0163bb22211c42a9cd16449f8bf780208
Size

109KB
MD5

17ad76744497c85183638006e9ed5491
SHA1

e5745bfca7a60578bef20d65a7dd2d79047d500b
SHA256

27e4f95ba9fcad3508b1240f2bf824d0163bb22211c42a9cd16449f8bf780208
SHA512

3d7e4bbffbd9a0e3aea5bc9dc371a57f407dfa6d24597b135cfc282640340f9750a5c7dcb5c7cc45853785b2b7822e072d0ebf7b11e927a83a8bddbd47a1fdde
SSDEEP

1536:kTF6FQ85LFiGkSzyqzin5SP9cljcfcU9CEw9aINe3z5c:mF6F15h/zIn5S1aj+cU9CEw9aINeja

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e4f95ba9fcad3508b1240f2bf824d0163bb22211c42a9cd16449f8bf780208

27e4f95ba9fcad3508b1240f2bf824d0163bb22211c42a9cd16449f8bf780208
.exe windows:6 windows

Headers