Analysis
-
max time kernel
140s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
26-05-2024 16:14
Behavioral task
behavioral1
Sample
GhostChecker.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
GhostChecker/CaptchaPRIV.EFU.dll
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
GhostChecker/Epicgame.API.Uev.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
GhostChecker/GhostChecker.APP.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
GhostChecker/GhostChecker.exe
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Stub.pyc
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
GhostChecker/GhostSync.dll
Resource
win10-20240404-en
General
-
Target
GhostChecker.zip
-
Size
10.0MB
-
MD5
4bc9dcf900d29ff5b3f1f50b04cdfcb4
-
SHA1
152b21921d5f7a663a21c664a53a3b7ee53b3b8c
-
SHA256
2a3340478791aeeaaf6e64fd877ea41f81975c21e588a24e56eeaa7f8097c8bc
-
SHA512
d3ba78eba5cce684c80d477d11aee9f23ea0a122b04c99a4bdac9f54df1ad9528d41012d17c591c586b7b0565f80a7555cec27f9f3e43d18321026ecb3f24239
-
SSDEEP
196608:AY7axwHrFPwzzIwzL/koP8DJNdie0RHxsWDOvh5ojGV8BGFaRtkfpjqHr2lbZjNL:AIrJwzzLzbbMNyRHXq5iGV8B4aRtkfIe
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\GhostChecker.zip1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵