General

  • Target

    Ghosty V2.exe

  • Size

    5.2MB

  • MD5

    739dce2fd5e78ea4dbe2b3e9d4f83deb

  • SHA1

    4368c7261518b2da645d0978ba318e602137a188

  • SHA256

    5e0cfd1ca903a2b05f3ecea1ff5a697a71beb16952e3a6162b89a9c7570521cb

  • SHA512

    b812943a948cf264b812728807b8a6e7df175931e0d3fee2d6c9ddb465ac0ef85679e10292e7f85d1759880c421a156b89ce9e4a5af49c197e818271b0189235

  • SSDEEP

    98304:NqNP47sUR/fiWXGaOntNcCrMLLOVutmyD0qLoZA6Vf:NiP47sEf72aOn3cCuB8ZDF

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ghosty V2.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections