Overview

overview

3

Static

static

3

summerGHOS...rv.exe

windows7-x64

1

summerGHOS...rv.exe

windows10-2004-x64

1

summerGHOS...71.vbs

windows7-x64

1

summerGHOS...71.vbs

windows10-2004-x64

1

summerGHOST/RenIP.exe

windows7-x64

1

summerGHOST/RenIP.exe

windows10-2004-x64

1

summerGHOS...IP.exe

windows7-x64

3

summerGHOS...IP.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3656a2a406ad4da8d287633f693acba6_JaffaCakes118

  • Size

    6.2MB

  • MD5

    3656a2a406ad4da8d287633f693acba6

  • SHA1

    b90ed4f525e1d27596bd2ca1adb0d9b6364f3c29

  • SHA256

    e7444406a6efc1b64dfe0246a03694e0c6ece62a1ce977e388ee2db2f3e5a604

  • SHA512

    bbfe6b533a92c0219a772d7b2541666c727ddffad9e2f87d79d7c42b42d4b5f154232a059c418c1c7cde929d3dd2a7cff9104ac666438f0df1638378c42c31a8

  • SSDEEP

    98304:/lVT/dKk4iYrOMnlCAfRJhDk3KkVxwSRQS/ZNof/oonRBmW4Y1c21xLneXl:8k4vn8uhDk3pafn/f/nO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 3656a2a406ad4da8d287633f693acba6_JaffaCakes118
    .rar
  • summerGHOST/GhostSrv.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • summerGHOST/MAXDOS.PXE
  • summerGHOST/MaxDOS71.sys
    .vbs
  • summerGHOST/RenIP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • summerGHOST/TestIP.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • summerGHOST/使用说明.txt