Overview

overview

10

Static

static

10

a1b468e955...5f.exe

windows7-x64

7

a1b468e955...5f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

  • Size

    7.0MB

  • Sample

    240621-mvdveszgqk

  • MD5

    f001329114937fbc439f251c803ba825

  • SHA1

    95ae81de52655fac3f1b226f1896690566090640

  • SHA256

    a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

  • SHA512

    2148b2d2aa3c5d70cb975a31b3026fa618b633122f1b953e4a0efe5c03e86058f63161fad0fb4f5dbebcf3f9634b5fd89b98200c6158c125b03abf42d6c04d26

  • SSDEEP

    98304:nc73qiu3g8TIvjESButfoF+6UGzzFBLzA2PP8e:cmh3g8TI4SnCGVBL02P0

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://94.103.91.246/incrementLaunch

http://94.103.91.246/addInfection

Targets

    • Target

      a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

    • Size

      7.0MB

    • MD5

      f001329114937fbc439f251c803ba825

    • SHA1

      95ae81de52655fac3f1b226f1896690566090640

    • SHA256

      a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

    • SHA512

      2148b2d2aa3c5d70cb975a31b3026fa618b633122f1b953e4a0efe5c03e86058f63161fad0fb4f5dbebcf3f9634b5fd89b98200c6158c125b03abf42d6c04d26

    • SSDEEP

      98304:nc73qiu3g8TIvjESButfoF+6UGzzFBLzA2PP8e:cmh3g8TI4SnCGVBL02P0

    Score
    7/10

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks