Resubmissions

21/01/2025, 12:36

250121-ps8ywstrcp 10

21/01/2025, 11:35

250121-nqa4easjhj 10

General

  • Target

    8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9

  • Size

    7.0MB

  • Sample

    250121-nqa4easjhj

  • MD5

    8ad67a1b7a5f2428c93f7a13a398e39c

  • SHA1

    d4f71fc5479a02c8ff57c90fc67b948adb5604e0

  • SHA256

    8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9

  • SHA512

    57475600b531b3b80936bf3015d5a38bba61cfac793cb4de9985d4e4b0afdc12f7f591ecdc8e9f9fd2dcb7b0e3d2fe851f33f80ba2888730774f73ac8ab34b5c

  • SSDEEP

    98304:UNmXStQHQu1OCUPExButIaUgF246UZ0R+xp2exp2U3KQ5KntG:2Bt2Qu1OAxW2kyRU913KQ

Score
10/10

Malware Config

Extracted

Family

ghostlocker

C2

http://94.103.91.246/addInfection

Targets

    • Target

      8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9

    • Size

      7.0MB

    • MD5

      8ad67a1b7a5f2428c93f7a13a398e39c

    • SHA1

      d4f71fc5479a02c8ff57c90fc67b948adb5604e0

    • SHA256

      8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9

    • SHA512

      57475600b531b3b80936bf3015d5a38bba61cfac793cb4de9985d4e4b0afdc12f7f591ecdc8e9f9fd2dcb7b0e3d2fe851f33f80ba2888730774f73ac8ab34b5c

    • SSDEEP

      98304:UNmXStQHQu1OCUPExButIaUgF246UZ0R+xp2exp2U3KQ5KntG:2Bt2Qu1OAxW2kyRU913KQ

    Score
    7/10
    • Drops startup file

MITRE ATT&CK Matrix

Tasks