gh0strat | e3427457c67d271f39b3cce1952de1b03d7adf1d3e6a8f1c2d0b9bbdf5bda76b

General

Target

e3427457c67d271f39b3cce1952de1b03d7adf1d3e6a8f1c2d0b9bbdf5bda76b
Size

1.6MB
MD5

3398b95691f7f20e052d4e4bf7ffa4cf
SHA1

6647890d0e0aa9f806b2d19aca718e41190eb0dd
SHA256

e3427457c67d271f39b3cce1952de1b03d7adf1d3e6a8f1c2d0b9bbdf5bda76b
SHA512

a3e184d5cb50acd490c1f72c124688fa186a3e3e6ffb33070dcb427225ef4172221acc2ca2fd45c372cda4b492b47a9aa15af40c682b47356df4bf7410e20a6a
SSDEEP

24576:4pfX8ZoWYkGs9kDUqw6e+wtNH9iKXpb2/kWZT8UASM5hCfHWMwMtRisOEZmSK0Vf:YglthTSN

Score

10^/10

Detect PurpleFox Rootkit 1 IoCs

Detect PurpleFox Rootkit.

resource	yara_rule
sample	purplefox_rootkit

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3427457c67d271f39b3cce1952de1b03d7adf1d3e6a8f1c2d0b9bbdf5bda76b