General
- Target Ghosty.exe
- Size 2.8MB
- Sample260421-e4kekahw5m
- SHA256 8e65d7fa956e2840e2ce15cef81c6574798947b859df79c3edde69c12f576eb9
- MD5 ff170d5864fc5da0d87cce0182533bd9
- SHA1 25d4267b6a139c52ebb548cd04ab05528742c913
- SHA512 d400c23d33d857437b1a191d479387eb5236a8b49fcb75ceb3cb7aef19e8a2739793581709f02ee066dfa2cafd9b3e37210a2e36d167381b917987169e2e79f2
- SSDEEP 49152:wkrulyMwJtIore0MGDXC+uMCAKKVSC+uMhxn1Ha:GGtRrcc7KKPch2
- TLSH T162D5E145E2A701E8C5A68138872B931BEB323045073357CF6BE52A567F67EE21B7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ghosty.exe
Resource
win11-20260130-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Ghosty.exe
- Size 2.8MB
- SHA256 8e65d7fa956e2840e2ce15cef81c6574798947b859df79c3edde69c12f576eb9
- MD5 ff170d5864fc5da0d87cce0182533bd9
- SHA1 25d4267b6a139c52ebb548cd04ab05528742c913
- SHA512 d400c23d33d857437b1a191d479387eb5236a8b49fcb75ceb3cb7aef19e8a2739793581709f02ee066dfa2cafd9b3e37210a2e36d167381b917987169e2e79f2
- SSDEEP 49152:wkrulyMwJtIore0MGDXC+uMCAKKVSC+uMhxn1Ha:GGtRrcc7KKPch2
- TLSH T162D5E145E2A701E8C5A68138872B931BEB323045073357CF6BE52A567F67EE21B7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.