General
- Target cb4dd9a0f09fa0d8f26efada868d096837bf491d6f7a4d5f4cbbc872549c38cd
- Size 1.5MB
- Sample260701-mr7nbses4v
- SHA256 cb4dd9a0f09fa0d8f26efada868d096837bf491d6f7a4d5f4cbbc872549c38cd
Score
10/10
Malware Config
Targets
-
- Target cb4dd9a0f09fa0d8f26efada868d096837bf491d6f7a4d5f4cbbc872549c38cd
- Size 1.5MB
- SHA256 cb4dd9a0f09fa0d8f26efada868d096837bf491d6f7a4d5f4cbbc872549c38cd
Score10/10-
Detect PurpleFox Rootkit
Detect PurpleFox Rootkit.
-
Family: Gh0strat
Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
-
Family: PurpleFox
PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.
-
Gh0st RAT payload
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.