Overview

overview

10

Static

static

10

a1b468e955...5f.exe

windows7-x64

7

a1b468e955...5f.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

  • Size

    7.0MB

  • MD5

    f001329114937fbc439f251c803ba825

  • SHA1

    95ae81de52655fac3f1b226f1896690566090640

  • SHA256

    a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f

  • SHA512

    2148b2d2aa3c5d70cb975a31b3026fa618b633122f1b953e4a0efe5c03e86058f63161fad0fb4f5dbebcf3f9634b5fd89b98200c6158c125b03abf42d6c04d26

  • SSDEEP

    98304:nc73qiu3g8TIvjESButfoF+6UGzzFBLzA2PP8e:cmh3g8TI4SnCGVBL02P0

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://94.103.91.246/incrementLaunch

http://94.103.91.246/addInfection

Signatures

  • Ghostlocker family
    ghostlocker
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections