gh0strat | b0c809308fed7a0256a1c42a89e1b252661ae115b6effef1d3c7c1285c31acb5

General

Target

b0c809308fed7a0256a1c42a89e1b252661ae115b6effef1d3c7c1285c31acb5
Size

1.3MB
MD5

0a2f2cf19b0ad3f3420914cc6212561e
SHA1

87ae3b8198bdb6c9279bed5274330f4351b74b07
SHA256

b0c809308fed7a0256a1c42a89e1b252661ae115b6effef1d3c7c1285c31acb5
SHA512

7ef32be96caa10cc0945305bcc11e1195e329177f753873595039f67bd1aa54c330e2c3f026ef73e77a4ec9e6cbde326e7460734050e5698a7fd5f0634b08038
SSDEEP

24576:V2X5keaKyiQF1Fil+6iIDzYgcM5oxXMYbfvMtRice07P6:utQSu0y

Score

10^/10

upx gh0strat

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0c809308fed7a0256a1c42a89e1b252661ae115b6effef1d3c7c1285c31acb5