General

  • Target

    5d5f79e19a191eda6c4c0ec482304e3642d36e7a965dc895fe306b4f3bce245c

  • Size

    51KB

  • MD5

    1d59e1a681137b15e0a8f5f4e2099773

  • SHA1

    44e49f4230317260e52afe81d0f5897b6511de9b

  • SHA256

    5d5f79e19a191eda6c4c0ec482304e3642d36e7a965dc895fe306b4f3bce245c

  • SHA512

    16fb8584ee65001cbbefde8f202e2f3a2e947efba80b0c8d593be893844f10dedfce227ba25b5930124108c63a66ccf7fb0c01229517872783539894c696de99

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbovJYH5

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d5f79e19a191eda6c4c0ec482304e3642d36e7a965dc895fe306b4f3bce245c
    .dll windows:4 windows x86 arch:x86

    4847c8aea5b26a115e9f4b1fffee02d5


    Headers

    Imports

    Exports

    Sections