General

  • Target
    c1217d6da3f2f88db935a14b081de83273d3541112f5c01ff6b0efb683d61aab
  • Size 49KB
  • Sample250101-mszdcasmds
  • SHA256 c1217d6da3f2f88db935a14b081de83273d3541112f5c01ff6b0efb683d61aab
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • c1217d6da3f2f88db935a14b081de83273d3541112f5c01ff6b0efb683d61aab
    .dll 49KB

c1217d6da3f2f88db935a14b081de83273d3541112f5c01ff6b0efb683d61aab

  • IMPHASH 17934126e1b968a66c8bb9995517aa55
  • SHA256 c1217d6da3f2f88db935a14b081de83273d3541112f5c01ff6b0efb683d61aab
  • MD5 SHA1 SHA512 SSDEEP
  • Gh0st RAT payload

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
36360
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL
PDB paths