General

  • Target

    447115026c39addab2395515c64aab1a5f328a71a9a44381bd4f3594885d24ad

  • Size

    1.5MB

  • MD5

    35511efffc6d0ccde5e691f2513f3201

  • SHA1

    17844195a2bf5d5e5f79503c92fa9e291ea39d7b

  • SHA256

    447115026c39addab2395515c64aab1a5f328a71a9a44381bd4f3594885d24ad

  • SHA512

    01e2897699283f3f19632050cd8cd337ec2c6d3dfa5662fc8b3c1430552cf03a949b59ae22a909a7dd4e23269275572079e611d25634b0c4f7959c32f22ac454

  • SSDEEP

    24576:l39EaDUHFNvyC6X3bQm1JHiMhYNU2VuFiWM5GrkQPXHMtR1tD1ZhtTGOaK0/k8:Z9tkmC3TGVL

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • Purplefox family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 447115026c39addab2395515c64aab1a5f328a71a9a44381bd4f3594885d24ad
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections