gh0strat | 164cdc73e9d43623ff176c67ef7bfa9af18569f44492d9d1e66971ad73f16e74

General

Target

164cdc73e9d43623ff176c67ef7bfa9af18569f44492d9d1e66971ad73f16e74
Size

1.5MB
MD5

8873fa72a9d615c17ddf2f09c3e5e118
SHA1

9e2e6d4115a5745b9db84eede08b2a9c536654ef
SHA256

164cdc73e9d43623ff176c67ef7bfa9af18569f44492d9d1e66971ad73f16e74
SHA512

2a043dc8e2225d9c99f9b1093f03062b53f01c70e59a9045586c8122776d2f086aafe2abe6cf7abb5f897249d8aa72d79db5ba8d1d20857838179c2455ca782f
SSDEEP

24576:7MfywgIt/65Fu99573/aiVIOYrFzpCM5hyv3m8AMtRyce0LmOK0B:l49rN

Score

10^/10

Detect PurpleFox Rootkit 1 IoCs

Detect PurpleFox Rootkit.

resource	yara_rule
sample	purplefox_rootkit

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
164cdc73e9d43623ff176c67ef7bfa9af18569f44492d9d1e66971ad73f16e74