gh0strat | dc95ca5803c36d74a659ba95ede9e5d1eb687b799a54169b81fc6d3db8e2fdcb

General

Target

dc95ca5803c36d74a659ba95ede9e5d1eb687b799a54169b81fc6d3db8e2fdcb
Size

109KB
MD5

6e258e7d474bb4e78e1781e1bce25474
SHA1

32097c8e07f9ab24f1fbb8e04083b8df06592f23
SHA256

dc95ca5803c36d74a659ba95ede9e5d1eb687b799a54169b81fc6d3db8e2fdcb
SHA512

1334079b46edf3e647b85da30f767c655a081cdb9f2ca8a59f353e3a83d0d9cbddba7bcc5ed81c6e1d6c64d6ba68bea8d60c0235b21fde71348f868c35cc4c3c
SSDEEP

3072:vF6F15h/zIn5S1aj+cU9C8vgGw9aINejS:wFjhLI5SG+Fq9aIA+

Score

10^/10

gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc95ca5803c36d74a659ba95ede9e5d1eb687b799a54169b81fc6d3db8e2fdcb

dc95ca5803c36d74a659ba95ede9e5d1eb687b799a54169b81fc6d3db8e2fdcb
.exe windows:6 windows

Headers