Overview

overview

10

Static

static

10

8b758ccdfb...e9.exe

windows7-x64

7

Resubmissions

21/01/2025, 12:36

250121-ps8ywstrcp 10

21/01/2025, 11:35

250121-nqa4easjhj 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9

  • Size

    7.0MB

  • MD5

    8ad67a1b7a5f2428c93f7a13a398e39c

  • SHA1

    d4f71fc5479a02c8ff57c90fc67b948adb5604e0

  • SHA256

    8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9

  • SHA512

    57475600b531b3b80936bf3015d5a38bba61cfac793cb4de9985d4e4b0afdc12f7f591ecdc8e9f9fd2dcb7b0e3d2fe851f33f80ba2888730774f73ac8ab34b5c

  • SSDEEP

    98304:UNmXStQHQu1OCUPExButIaUgF246UZ0R+xp2exp2U3KQ5KntG:2Bt2Qu1OAxW2kyRU913KQ

Score
10/10
ghostlocker

Malware Config

Extracted

Family

ghostlocker

C2

http://94.103.91.246/addInfection

Signatures

  • Ghostlocker family
    ghostlocker
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections