Overview

overview

10

Static

static

10

c9f71fc4f3...8a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9f71fc4f385a4469438ef053e208065431b123e676c17b65d84b6c69ef6748a.zip

  • Size

    4.4MB

  • Sample

    240328-msskssaf3v

  • MD5

    7e8a88e6fefc2af316174ed48f464818

  • SHA1

    5cf08535abe621be61174c0e31a88924ba729753

  • SHA256

    68a80ee6f94620d4cdecdae10dee4ea77c1d244a6e08bbfe12193f91f35e1881

  • SHA512

    8eb870db228aa0e45f18e99e8b9b00c4d668c3d7bea9fb7d27cb1bf08e7d3a2d8fb96aae6f2a5df311fab2fc6448d6a386eaccd9877dfa36cf1fb9fc4bc53556

  • SSDEEP

    98304:L345PsXhl563rQnCewACfYl7yFbsgOr3My7GzIGLi7TZ:LoqhlQ3riCewA8ueFb10KzIGLi7TZ

Score
10/10
ghostlockerdiscoveryspywarestealer

Malware Config

Extracted

Family

ghostlocker

C2

http://41.216.183.31/addInfection

Targets

    • Target

      c9f71fc4f385a4469438ef053e208065431b123e676c17b65d84b6c69ef6748a.exe

    • Size

      7.7MB

    • MD5

      c30a14b595fa334084cd32fa60b3c827

    • SHA1

      3cd04b60b329388059cf58ce3ee6996559123cfa

    • SHA256

      c9f71fc4f385a4469438ef053e208065431b123e676c17b65d84b6c69ef6748a

    • SHA512

      7e244b3d45874d4cbecf53c6c404cd5681879a776b4a5710327c88d7888b61bdfafd17d462244b9ae8235955d8df148da72215ea61514c01585e4d0132ece9a8

    • SSDEEP

      98304:YLraiumim2uZeGEWyOdLQvu6zer0NGBJMV1ZAU6tSOsN:2Imim2uZ8pvW6fAJMVd6M/N

    Score
    7/10
    discoveryspywarestealer

    • Modifies file permissions

      discovery

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks