Overview

overview

10

Static

static

10

15701537546.zip

windows7-x64

1

15701537546.zip

windows10-2004-x64

1

7804e09b2b...c4.exe

windows7-x64

1

7804e09b2b...c4.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15701537546.zip

  • Size

    4.5MB

  • MD5

    71e478fe2bd3d32dbe470b57b994ca28

  • SHA1

    02b01f12ef6cb0594f3396dcab0c3c283f3a945c

  • SHA256

    1364cbf8358f78f83cd39bcbfd21ea8dbff81c4e9d7e28729b816db95b04eefd

  • SHA512

    a42694a8cedb4bf97d1a1878f0dda971865e262074973b10a480b12e66f01a3fac949ce01a1c0be0da382a2cc6f4baa09de4f7f6b173c39e87d1494e48a3ff8a

  • SSDEEP

    98304:SerphDgDvStMjBvZoDm96SwBz98R00KDIbYJO3pn0:SerphNt4x96Lb8t8JOZ0

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://41.216.183.31/addInfection

Signatures

  • Ghostlocker family
    ghostlocker
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15701537546.zip
    .zip

    Password: infected

  • 7804e09b2ba224bae06bf23ca2a8b8d668d58b828a8d5aadbbb21c3b7e2acfc4
    .exe windows:6 windows x64 arch:x64

    Password: infected

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections