General
- Target GhostKey.exe
- Size 88KB
- Sample260525-vbprksdw3k
- SHA256 6fd89f35b04cd072e81375af9ca9cc44786d01ebae3b7bbf53ad23e4098ebe46
- MD5 ccca2319dbb2bbe7dcdbb873047ab64b
- SHA1 ceffec372c69ddfe565bd27a1ffd565aaef908be
- SHA512 a834fffc895fb9ce1081b72cbadde80d74e90a14f20fed3a1c1259e58c19f209c8c73da593078d57b1bd31472b7740063db319763aad7a212d64ce31bf037567
- SSDEEP 1536:rXbhQ5KULeuTiQFh8iUswshSvrWC5yL+G6cfmeqEGLC5:rXboKbeD8iU5s6pyLpfapC5
- TLSH T1F693B31567DD01D8F5B39678DAB65122E773B8552B32EBDF0350025A4F36AC09E38B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GhostKey.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
GhostKey.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target GhostKey.exe
- Size 88KB
- SHA256 6fd89f35b04cd072e81375af9ca9cc44786d01ebae3b7bbf53ad23e4098ebe46
- MD5 ccca2319dbb2bbe7dcdbb873047ab64b
- SHA1 ceffec372c69ddfe565bd27a1ffd565aaef908be
- SHA512 a834fffc895fb9ce1081b72cbadde80d74e90a14f20fed3a1c1259e58c19f209c8c73da593078d57b1bd31472b7740063db319763aad7a212d64ce31bf037567
- SSDEEP 1536:rXbhQ5KULeuTiQFh8iUswshSvrWC5yL+G6cfmeqEGLC5:rXboKbeD8iU5s6pyLpfapC5
- TLSH T1F693B31567DD01D8F5B39678DAB65122E773B8552B32EBDF0350025A4F36AC09E38B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Looks for VirtualBox Guest Additions in registry
Looks for VMWare Tools registry key