gh0strat | 4937aed8764c78c1fb84e08841983513854cfaeebc874d33c23f98b81a212ff5

General

Target

4937aed8764c78c1fb84e08841983513854cfaeebc874d33c23f98b81a212ff5
Size

1.5MB
MD5

714a5fc21410b54acc746ebe453fe4f4
SHA1

97fdb7ffc7f3b425fdd63763ef88b38f742349da
SHA256

4937aed8764c78c1fb84e08841983513854cfaeebc874d33c23f98b81a212ff5
SHA512

e278653fd955452376cac0af77f5174aae5ff496d03161026d6318ae5e6579a8c3d5c4165b4bd8c1531b9613960ee958ed0719866f4ffb2ef6a88915e8dd43c7
SSDEEP

24576:F4fN+868tejzFO9dZ73/Ci9oOIrhjOnM5hyv3m8AMtRyce0LbbK0Q:BQ9Fk

Score

10^/10

Detect PurpleFox Rootkit 1 IoCs

Detect PurpleFox Rootkit.

resource	yara_rule
sample	purplefox_rootkit

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4937aed8764c78c1fb84e08841983513854cfaeebc874d33c23f98b81a212ff5