General

  • Target

    0ad4a595c4761441d76baf81be27da254ab34d17a5223891d9a1a5eb7feb4c20N

  • Size

    152KB

  • MD5

    1838c8d4bfe3c9764d0ef0f1097cf710

  • SHA1

    861f8b8dccc110102fff5a32c722f30a7f123b3d

  • SHA256

    0ad4a595c4761441d76baf81be27da254ab34d17a5223891d9a1a5eb7feb4c20

  • SHA512

    3c2e2d0ce2a1781d8141e5eef9b2405be827ec15ee337fa272919943f2d7b5f95bed7fdb341e974dc9317e8d483b20819c85567eb8f44877fac344119e08c940

  • SSDEEP

    3072:lkWuj5fUKzLDcL9XDGN3WAiQPyZmcwi/5eTBftkBbdGZnLAo9W:h25sKE9XKx5cDxeTBlgdAnLAX

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ad4a595c4761441d76baf81be27da254ab34d17a5223891d9a1a5eb7feb4c20N
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections