Overview

overview

10

Static

static

10

a1b468e955...5f.exe

windows7-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f.zip

  • Size

    4.0MB

  • MD5

    9a405e51443acf2fb013cf64929c06f1

  • SHA1

    6f658bfc244fb3c1a1f66b3b418bd1d1cada4c3e

  • SHA256

    6ed9e46556327404c62de615151ed9da049379b991bd5a39be08d40cfe585ce0

  • SHA512

    e4d79945a0075879b8994cdd220c222b72b14b396e24afda5e25c5b59bc5e8d10514726779d20b38eb31dd5bfcd3fe2809efd0c5a0a0b42d424f0e01bfbdfb2b

  • SSDEEP

    98304:SOJRMp5SV3kV+OBDUbvpaknoUCua5yVI+ghUbhYd9n1i:SR5MF8LkoUCuaSFOUbu7E

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://94.103.91.246/incrementLaunch

http://94.103.91.246/addInfection

Signatures

  • Ghostlocker family
    ghostlocker
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f.zip
    .zip

    Password: infected

  • a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections