689943208342ec183e3166f04aef2108b44833f10fe4a8de7133e86fd9037c82 | Triage

Analysis

max time kernel
147s
max time network
154s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
05-09-2024 09:11

Sharing

Report Analysis Logs

General

Target

ghost-1.0.4/_resources/icon.ico
Size

165KB
MD5

87b1d0ee689dd8ced2526eb537f9a8cb
SHA1

2a6dcc868bc798493fa6d8c7ef6e48eae1ad558c
SHA256

61bea7d03012856ba7a1603c306c8ae76f245f0743af4930d8ac48cbb6680044
SHA512

f956da4f534338ecd98b270fd7d1ba2fd1f5db2779653f8acc9f93b04bb9b118e92522a872fcf17f77048eef401b5302a72b7185582a36a1937c32a5cd067684
SSDEEP

1536:3BGl9Z19DPS+4p8yQXLqnHcuYoB7WqxZQP0DeDTHgRSV6+zpJ/iw+f5meG+4KJ+Z:KHHq+4pJQXWHcurAPR3gRSYUi4VVTm0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ghost-1.0.4\_resources\icon.ico
1⤵
PID:1628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads