Overview

overview

10

Static

static

10

c9f71fc4f3...8a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9f71fc4f385a4469438ef053e208065431b123e676c17b65d84b6c69ef6748a.zip

  • Size

    4.4MB

  • MD5

    7e8a88e6fefc2af316174ed48f464818

  • SHA1

    5cf08535abe621be61174c0e31a88924ba729753

  • SHA256

    68a80ee6f94620d4cdecdae10dee4ea77c1d244a6e08bbfe12193f91f35e1881

  • SHA512

    8eb870db228aa0e45f18e99e8b9b00c4d668c3d7bea9fb7d27cb1bf08e7d3a2d8fb96aae6f2a5df311fab2fc6448d6a386eaccd9877dfa36cf1fb9fc4bc53556

  • SSDEEP

    98304:L345PsXhl563rQnCewACfYl7yFbsgOr3My7GzIGLi7TZ:LoqhlQ3riCewA8ueFb10KzIGLi7TZ

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://41.216.183.31/addInfection

Signatures

  • Ghostlocker family
    ghostlocker
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c9f71fc4f385a4469438ef053e208065431b123e676c17b65d84b6c69ef6748a.zip
    .zip

    Password: infected

  • c9f71fc4f385a4469438ef053e208065431b123e676c17b65d84b6c69ef6748a.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections