Overview

overview

9

Static

static

3

Gh0st 1nj/...V1.exe

windows7-x64

7

Gh0st 1nj/...V1.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    MysteryFlowers (2727).zip

  • Size

    5.0MB

  • MD5

    ee2502d99fd433a242b1daa365fb31bf

  • SHA1

    950adbb9303cdd76d2a89ce4c80f49488be66334

  • SHA256

    2fcd50d1a9f73722471c2ce06dce330edb5348a07390a434a554a31f7646d00f

  • SHA512

    5a710aa29409f7e807a4af151fa552150c59d5062cb566c491b869e0e773a6cded63f9b1762eafb9284840898f9725290aae644f675824745614071f7c81643e

  • SSDEEP

    98304:tKe5H0/0V8y8M/FQafVWGlhV+0Sy/eegBSqva7Vl49N0mM7KnGjgH:tK1/rJMDNWUT6Sqi7Dqz0LG

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MysteryFlowers (2727).zip
    .zip

    Password: 2727

  • Gh0st 1nj/Inf/ArOmodPpmk.xml
    .xml
  • Gh0st 1nj/Inf/BHnfCNKJJr.xml
    .xml
  • Gh0st 1nj/Inf/DbYgtRCNoe.xml
    .xml
  • Gh0st 1nj/Inf/FLnwJaEDnM.xml
    .xml
  • Gh0st 1nj/Inf/FcydhtoAxs.xml
    .xml
  • Gh0st 1nj/Inf/FrzBQTmCSj.xml
    .xml
  • Gh0st 1nj/Inf/HIuTTeBcCw.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/BbhEarEBHN.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/CWTlBZwakb.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/CZkFeZxJAo.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/ENhjUpGcDq.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/ErqNReLmpJ.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/FeozGtGNRG.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/IAtVjqCzGU.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/IwtCXSeAoo.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/JqPokhsyjl.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/LaoEVjhQFm.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/LoKvZQSnlo.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/NuYCtLKHmc.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/RFCkCqmOyr.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/SQKsWKeQhy.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/UVBgTqKnDt.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/VgZSggDbub.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/VqMkVsPevH.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/XCXytCEXGb.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/XRkuwngabJ.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/YOvHZQhNdN.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/azDDrgwmhF.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/dzxMyNjpKF.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/fKQukFJKtM.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/fWUzRHXUTz.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/ivcMhSCwYs.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/jeeMyFnHBD.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/oAfTLlbWer.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/oCLhEsZoos.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/oXwAxbxbUf.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/ozWdYdRkIE.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/sIoWuwPUub.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/tmUyYOMDpY.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/uHEBKfCkkt.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/uHvOcvAvUJ.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/vmWxhVrSJT.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/wGMDVIsMTk.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/wbfaKBWOrO.xml
    .xml
  • Gh0st 1nj/Inf/IBwmVYGXmR/zYcLVYjJFU.xml
    .xml
  • Gh0st 1nj/Inf/KDDRBNFFSw.xml
    .xml
  • Gh0st 1nj/Inf/MTpWFDOfif.xml
    .xml
  • Gh0st 1nj/Inf/NFZvMpoPqC.xml
    .xml
  • Gh0st 1nj/Inf/NTFvZoreQG.xml
    .xml
  • Gh0st 1nj/Inf/VGUpNYLWkW.xml
    .xml
  • Gh0st 1nj/Inf/WLndXDbPuW.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/BDacScqqFz.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/CCWCAJWWCf.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/CPvJyjWfYi.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/DTfdASfrtb.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/DaqylOrMst.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/GeLiaZhJyM.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/JWMAHhdyIH.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/KwBdYlYYQb.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/LhGSNVwtcC.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/LssvcUzOEb.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/OTlpbETStB.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/QQMgRmFbBi.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/QQXkowWaDA.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/QrbXCIMJGG.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/RKJUSjnKBR.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/TKpSECKfgE.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/UAqAZMfjLE.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/VlHextqSBJ.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/aTkfjJMxnD.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/bOCTEmHbZZ.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/dEXSLNOJOj.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/emhygDoZoM.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/fhvwZJgedn.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/gkcCSfIgrF.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/hZyvzUWOAc.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/iBVoGappbq.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/kZBqAEEwKi.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/lOvTkLbQYX.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/lUEhXjSVsa.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/mxjRwSpyrH.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/oOgmyRRLiK.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/qjXDXHmXoi.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/rIIZGaEMzq.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/rNlYqCnsbH.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/rmVgCwPoSK.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/sNukRlwOKe.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/swwWebsnle.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/uQknksQuHk.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/vUWqgATzjV.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/veayBKrWJK.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/wnCfTbgSuH.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/wphpEBJeZS.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/zOjOCWlJBu.xml
    .xml
  • Gh0st 1nj/Inf/bssBLEzzBW/zaJPIoUwHB.xml
    .xml
  • Gh0st 1nj/Inf/cIhviDYIiC.xml
    .xml
  • Gh0st 1nj/Inf/dMOjnckDzL.xml
    .xml
  • Gh0st 1nj/Inf/kqAcHHNKYf.xml
    .xml
  • Gh0st 1nj/Inf/meQsVFkglK.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/CHbAtBQLkH.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/IevxWQyoAP.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/MCcTIdZLgw.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/NLUQePfsqs.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/OkACQiAtec.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/PFjkExCyHU.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/ZZSOzIQNuU.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/cFpfzuMqTk.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/usUeadhvAm.xml
    .xml
  • Gh0st 1nj/Inf/pXCZPZLsUQ/xGvjuZoNFu.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/AJjzmIxhUZ.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/BZfKyrlTKA.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/CqrNalJPOB.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/EsffZihJZZ.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/FNYINZltSF.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/GQrtJDXnJS.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/GmXxKFnuFo.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/HnApQOMAzI.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/IcgBYEEWjN.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/IhYXpRjEXW.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/JEdDKeywAp.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/KJSZjXdydj.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/KdVKCKdeIL.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/NnSsWsJPHv.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/OCuIMXiNDu.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/OJVUTxmWim.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/PGAeCaIDts.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/RFNqRsAoML.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/SdJNsAbiLE.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/SfpBrYJrwv.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/SyqMpCWkLG.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/UsASlThKug.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/VIVPYqCtWC.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/XTuIKFknRG.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/ZhRrmbQjyz.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/cOoumNHvlb.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/cVhHxZFsYR.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/ctDgqpXWnA.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/fHIuRAcWrI.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/ffJlfkBtqW.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/fyTwFVWuvY.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/gJdnVAHIkB.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/gzUTDBmYdN.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/jdytoxTepW.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/kLeCFnSqMp.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/mUtWQVUjBM.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/mlkcyVcHsN.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/moZyPLWaYk.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/mquHaapswr.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/ojNpkFFfBk.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/owVbDYfrMm.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/qChOAMdkPB.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/rjXexwYxaR.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/slryeVaMss.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/uVWSlIkzhF.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/wOaILCcPam.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/xLfANKTPMY.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/zRNjCdcYbu.xml
    .xml
  • Gh0st 1nj/Inf/rAbiWpfcTj/zvJZZdZhkm.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/BMeZgogNNw.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/CxZLYiHshL.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/EBBjHNpjWx.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/LPflHZsnEL.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/LqQXBnVGsK.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/NaoqiUZuKE.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/OeMgMFdTad.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/TprypMCRph.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/UtzTQRMopq.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/VDoxwapMGM.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/fRqNoPgyNj.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/fsgGqpIVkZ.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/hGRmLgTMTh.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/iJzfppRslF.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/iRmvXAhUvy.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/iTlRxAvRpV.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/igzxgFHPfA.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/lUQOzzDYET.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/liiivuJvmE.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/pJRVEdsRQe.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/pqQqoLrGVc.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/ptqhgeGOJS.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/ruOjOpKiKe.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/sJFqqQmQAF.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/sQmvLREaiR.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/ukXxGPdtWk.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/wviGKEwFaQ.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/xRgZXikcsQ.xml
    .xml
  • Gh0st 1nj/Inf/uYESqDokgU/xgthuogXyF.xml
    .xml
  • Gh0st 1nj/Inf/wvloMvjkLQ.xml
    .xml
  • Gh0st 1nj/Inf/zwOMDRjLyT.xml
    .xml
  • Gh0st 1nj/WolfSnV1.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2727

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Gh0st 1nj/cacert.pem
  • Gh0st 1nj/icudtl.dat
  • Gh0st 1nj/interface.json