Overview

overview

10

Static

static

10

Ghost Exec...25.exe

windows10-2004-x64

10

Ghost Exec...25.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ghost Executor © 2025.exe

  • Size

    76KB

  • MD5

    08b2c2d938237ebdd99c06a0e58f4fea

  • SHA1

    0b7b120cdbec76e8c442ff23c04f3a22e8d3c0d9

  • SHA256

    7e222229236be686287c1fa9228555d9c34c899e7dc2b1d5f091b6a3cdc74e57

  • SHA512

    ca4ded59c6055a76e5077065efda8220bc649d1ecf281cf1d18adf7d0c9c9edcf794cf6ffecd2febb723715342250a3bfa02c187d168a37aa8bed10a7a8e3db7

  • SSDEEP

    1536:p8sefK3TDB41lkyeXhPC5p/DICG8bevlKKARY3nAiaGOg/zSG:yVQB41lklXlC5p/E/8b4lPA0Og/zSG

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

born-questionnaire.gl.at.ply.gg:44137

Attributes
  • Install_directory

    %AppData%

  • install_file

    Installing.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ghost Executor © 2025.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections