General
- Target 54fed122e1c93aa6f1c0b29d9af9d391408b5de94a8fa7aa96e20ec81540c681
- Size 251KB
- Sample260823-j1egcsvbrh
- SHA256 54fed122e1c93aa6f1c0b29d9af9d391408b5de94a8fa7aa96e20ec81540c681
Score
10/10
Malware Config
Targets
-
- Target 54fed122e1c93aa6f1c0b29d9af9d391408b5de94a8fa7aa96e20ec81540c681
- Size 251KB
- SHA256 54fed122e1c93aa6f1c0b29d9af9d391408b5de94a8fa7aa96e20ec81540c681
Score10/10-
Family: Gh0strat
Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.
-
Gh0st RAT payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.