General

  • Target

    cebf76deabb47efe7ad3769c0586815d1d45e2ef9718057de77abb46b554f6f4.dll

  • Size

    1.2MB

  • MD5

    e51727b49e9c42d20db8ecdc7e20e0ae

  • SHA1

    7777702d55eb92fe4f4ce2edbaf1dc2db83ae68b

  • SHA256

    cebf76deabb47efe7ad3769c0586815d1d45e2ef9718057de77abb46b554f6f4

  • SHA512

    21de811db4d043c863159f83b2137c30053635309ecb87071b3d0be80dec92af2063b1864e976d16c9f3601b9461fdfadc2234e44d890d91ea88c4d8d122f6df

  • SSDEEP

    24576:ssh4GJrUiQGtGMNBihr/abS73/iBtKB32Sttm7izM5GrkQPXHMtR1tD1bZtTkRxw:4Wr1fTkM

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Purplefox family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cebf76deabb47efe7ad3769c0586815d1d45e2ef9718057de77abb46b554f6f4.dll
    .dll windows:4 windows x86 arch:x86

    6718574bfa82ab04bcaf82fa9136fc6c


    Headers

    Imports

    Exports

    Sections