General

  • Target

    0a326b1125ed6cc9f9b28af1e1e6f49bab495f2a541aa87416bbfc94e945dfd6

  • Size

    54KB

  • MD5

    03a62140a124c49a153ea3d5656b7930

  • SHA1

    8d8e72eca998fab10bb27a0ae1f7a51d1f7dafa9

  • SHA256

    0a326b1125ed6cc9f9b28af1e1e6f49bab495f2a541aa87416bbfc94e945dfd6

  • SHA512

    c118d915f76e1627bb7e023a45d942aed79ae3f73051aa9f3641b1dc920c97573e885c4461618e6cfd7ea65f0e1c195db217089ac72d508afa2713726298f647

  • SSDEEP

    1536:T5bZlWakB9GYMURooZHAi7x4yj6bj9aHdJ:tbZAakB9ZMUxHAi7E92dJ

Score
10/10

Malware Config

Signatures

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a326b1125ed6cc9f9b28af1e1e6f49bab495f2a541aa87416bbfc94e945dfd6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections