Overview

overview

10

Static

static

10

006b067f39...7f.exe

windows7-x64

006b067f39...7f.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15716447715.zip

  • Size

    4.0MB

  • MD5

    b91dc1af9d4d88bc2066e9fbaf694a31

  • SHA1

    abcd562a4f18eb67ebac5fcd4e91dddddc786d94

  • SHA256

    b9fc6c6538caad1d83a7dd9234c494fbd75b25fed1b642c1c6c73658aac58aba

  • SHA512

    013fb74458429e57033694a04339e08c43c3bf9ed6adfd8d4861739eae4b28eb3545fa5e5b4bf8fb2d91fd186417af501593dd17cb8878e717d4cc4f954f9f09

  • SSDEEP

    98304:4qNJDJn0bsI165hk8jgXqUEPca3BAkUaMtGodc1z4e1154loI:4wJDJ0b5655gXvKzq/AGc0eH54GI

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://195.160.222.36/addInfection

Signatures

  • Ghostlocker family
    ghostlocker
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15716447715.zip
    .zip

    Password: infected

  • 006b067f39f22e14678bfe1f1441bf0c5a62cbcb56b6ef5bd5337aafeb6d937f
    .exe windows:6 windows x64 arch:x64

    Password: infected

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections