Overview

overview

10

Static

static

10

a1b468e955...5f.exe

windows7-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f.zip

  • Size

    4.0MB

  • Sample

    240316-n2pqyace53

  • MD5

    9a405e51443acf2fb013cf64929c06f1

  • SHA1

    6f658bfc244fb3c1a1f66b3b418bd1d1cada4c3e

  • SHA256

    6ed9e46556327404c62de615151ed9da049379b991bd5a39be08d40cfe585ce0

  • SHA512

    e4d79945a0075879b8994cdd220c222b72b14b396e24afda5e25c5b59bc5e8d10514726779d20b38eb31dd5bfcd3fe2809efd0c5a0a0b42d424f0e01bfbdfb2b

  • SSDEEP

    98304:SOJRMp5SV3kV+OBDUbvpaknoUCua5yVI+ghUbhYd9n1i:SR5MF8LkoUCuaSFOUbu7E

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://94.103.91.246/incrementLaunch

http://94.103.91.246/addInfection

Targets

    • Target

      a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f.exe

    • Size

      7.0MB

    • MD5

      f001329114937fbc439f251c803ba825

    • SHA1

      95ae81de52655fac3f1b226f1896690566090640

    • SHA256

      a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

    • SHA512

      2148b2d2aa3c5d70cb975a31b3026fa618b633122f1b953e4a0efe5c03e86058f63161fad0fb4f5dbebcf3f9634b5fd89b98200c6158c125b03abf42d6c04d26

    • SSDEEP

      98304:nc73qiu3g8TIvjESButfoF+6UGzzFBLzA2PP8e:cmh3g8TI4SnCGVBL02P0

    Score
    7/10

    • Drops startup file

    behavioral1

MITRE ATT&CK Matrix

Tasks