General

  • Target

    ac245558d922fe1dec1d9cc71c26827027c471fa8c43c0baae4f2b13ef5a7c63

  • Size

    1.6MB

  • MD5

    aa9b2030a9ccc383726f6a0fb36c782b

  • SHA1

    a7174c684533ee821ab250a3dfdda032a1678873

  • SHA256

    ac245558d922fe1dec1d9cc71c26827027c471fa8c43c0baae4f2b13ef5a7c63

  • SHA512

    78ca5fdca1c9ee9f81398c61fc804767434c4df91316a8aa7e0aad6d13eccd8cb469cc3af505db1e3cc4a0429fd84cbed60026d3992a88b24b8eb483c971913f

  • SSDEEP

    24576:kg1fYu5Dz7GTi5mrBmDiIGL32Ll8cWM5GrkQPXHMtR1tD1ritTZIEK0mBpF+rY6O:BLoBmUTZ0B2r1/z6

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Purplefox family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac245558d922fe1dec1d9cc71c26827027c471fa8c43c0baae4f2b13ef5a7c63
    .exe windows:4 windows x86 arch:x86

    ea36bec0ae927eae09c11c8feeacc6f1


    Headers

    Imports

    Sections