gh0strat | 77f6ea0248012e3a603169ee36c8f3f3b8c70eb178785dac34915f1b8608cc23

General

Target

77f6ea0248012e3a603169ee36c8f3f3b8c70eb178785dac34915f1b8608cc23
Size

1.5MB
MD5

49a70b9cc7f340bcb7359f73c1930ada
SHA1

833ee164382e73d96b57bd5e03580497015e1bf1
SHA256

77f6ea0248012e3a603169ee36c8f3f3b8c70eb178785dac34915f1b8608cc23
SHA512

43e5a6a42dac53163d23dd103396259dd60618c27b32dad5b5e4d05d249a645bf6219a66a01d1d5df18f95fb0083c06f19a42033399033ca2c826e745873a89c
SSDEEP

24576:7MfywgIt/65Fu99573/aiVIOYrFzpCM5hyv3m8AMtRyce0L3OK0B:l49r6

Score

10^/10

Detect PurpleFox Rootkit 1 IoCs

Detect PurpleFox Rootkit.

resource	yara_rule
sample	purplefox_rootkit

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77f6ea0248012e3a603169ee36c8f3f3b8c70eb178785dac34915f1b8608cc23