gh0strat | d2919890912b5a7ab442e625f5d6c7ba958685468c6a15bcc0957ed1dba87ea4

General

Target

d2919890912b5a7ab442e625f5d6c7ba958685468c6a15bcc0957ed1dba87ea4
Size

1.5MB
MD5

694610c692183843d8bbecdb90bc978a
SHA1

51a06b1a7da1b040369f4c639e58022363f9e95b
SHA256

d2919890912b5a7ab442e625f5d6c7ba958685468c6a15bcc0957ed1dba87ea4
SHA512

6cb7ed5557c801f1cf53b388c9ea56a20a8f564171a77a81a436b8e34bf9362b38cc0fbde535161cdf1d677ffa627f8a95bc60fcdab792f798ec1f2f339f4267
SSDEEP

24576:F4fN+868tejzFO9dZ73/Ci9oOIrhjOnM5hyv3m8AMtRyce0LdbK0Q:BQ9Fu

Score

10^/10

Detect PurpleFox Rootkit 1 IoCs

Detect PurpleFox Rootkit.

resource	yara_rule
sample	purplefox_rootkit

Gh0st RAT payload 1 IoCs

resource	yara_rule
sample	family_gh0strat

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2919890912b5a7ab442e625f5d6c7ba958685468c6a15bcc0957ed1dba87ea4