Overview

overview

7

Static

static

3

ARSoft.Tools.Net.dll

windows7-x64

1

ARSoft.Tools.Net.dll

windows10-2004-x64

1

BsSndRpt.exe

windows7-x64

1

BsSndRpt.exe

windows10-2004-x64

1

BugSplatDotNet.dll

windows7-x64

1

BugSplatDotNet.dll

windows10-2004-x64

1

BugSplatRc.dll

windows7-x64

1

BugSplatRc.dll

windows10-2004-x64

1

CyberGhost...on.dll

windows7-x64

1

CyberGhost...on.dll

windows10-2004-x64

1

CyberGhost...or.dll

windows7-x64

1

CyberGhost...or.dll

windows10-2004-x64

1

CyberGhost...ce.exe

windows7-x64

1

CyberGhost...ce.exe

windows10-2004-x64

1

CyberGhost...gs.dll

windows7-x64

1

CyberGhost...gs.dll

windows10-2004-x64

1

CyberGhost...es.dll

windows7-x64

1

CyberGhost...es.dll

windows10-2004-x64

1

CyberGhost.exe

windows7-x64

1

CyberGhost.exe

windows10-2004-x64

7

DE/CyberGh...es.dll

windows7-x64

1

DE/CyberGh...es.dll

windows10-2004-x64

1

DE/Lizenzvertrag.rtf

windows7-x64

4

DE/Lizenzvertrag.rtf

windows10-2004-x64

1

DE/OpenVPN...se.pdf

windows7-x64

1

DE/OpenVPN...se.pdf

windows10-2004-x64

1

Data/OpenV...32.dll

windows7-x64

1

Data/OpenV...32.dll

windows10-2004-x64

1

Data/OpenV...-2.dll

windows7-x64

3

Data/OpenV...-2.dll

windows10-2004-x64

3

Data/OpenV...-1.dll

windows7-x64

3

Data/OpenV...-1.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 16:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CyberGhost.Communication.dll

  • Size

    57KB

  • MD5

    0b8bdfa0d4b0ae75a1f48fe68d8b7b64

  • SHA1

    f50d417b6db71ad8a57c66a21159670252509c42

  • SHA256

    fd3ca4e7ed99cc1f2042e42254b3d129f361fa28374f132adf14fc4ec8dbbb5f

  • SHA512

    683948f37495d415090863959343952348765c814b8c15f1feaa2d45113addd4a33ec8d0e7cab5c19de4e5c88a0d775dba20d5aca2d9787f8413132ca9b3206a

  • SSDEEP

    768:yjZvEFFikKVE/wwrIwlLjDRVFT0c/VSHqANX3F68y/4a9XqtOhJR0Bz22TgNUbcR:L83FXa5qgR0BkUwtsizhdQrix5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\CyberGhost.Communication.dll,#1
    1⤵
      PID:2868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads