Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-05-2024 16:07

General

  • Target

    CyberGhost.Service.exe

  • Size

    233KB

  • MD5

    6e0dbdb495e0529370b27baa27db6528

  • SHA1

    778c4a29abffbffdc63840f68e9ced44eab2cbfe

  • SHA256

    dfb23aa3f9277876ab70e594b6722d99dcebce32331cd80728e9a3fa1d4f09d6

  • SHA512

    17eb55170a42c43e48ecd0248421340eea8177228764d0cf25f843c8f52ac454e3656f818f2d09b8e4866b13e79df9235b4bea0210dd4986b801dbb654a5631c

  • SSDEEP

    6144:SSu58jcZL/sW+ZIAaZ6buyxwLnWWmWa/YRX4HoHD/0yIYqMiY+:1+BZLUW+ZIAaZ6buyxwLnWlWa/YRX4HT

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\CyberGhost.Service.exe
    "C:\Users\Admin\AppData\Local\Temp\CyberGhost.Service.exe"
    1⤵
      PID:3872

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3872-0-0x000001A067180000-0x000001A0671C0000-memory.dmp

      Filesize

      256KB

    • memory/3872-1-0x00007FFE24A83000-0x00007FFE24A85000-memory.dmp

      Filesize

      8KB

    • memory/3872-2-0x000001A067560000-0x000001A067566000-memory.dmp

      Filesize

      24KB

    • memory/3872-3-0x000001A069630000-0x000001A06968C000-memory.dmp

      Filesize

      368KB

    • memory/3872-4-0x000001A0675B0000-0x000001A0675CA000-memory.dmp

      Filesize

      104KB

    • memory/3872-6-0x00007FFE24A80000-0x00007FFE25541000-memory.dmp

      Filesize

      10.8MB

    • memory/3872-7-0x00007FFE24A80000-0x00007FFE25541000-memory.dmp

      Filesize

      10.8MB