General
- Target ghostid_cli.exe
- Size 355KB
- Sample260603-sppbvsaw2y
- SHA256 c02d4122eaa0fdb5f69d6bb34cedde873141565da8b867051dc9f9962886c54a
- MD5 0594a3b6cabe9fd71e0d68c1ccecd1ae
- SHA1 aa8bbf3a050721dd00bd7d8a2465bae981b926aa
- SHA512 5b959b9f31054cd8e7afc00ed0fbb014044e0987c2b9abfe14493b7c0ceb3e4ce045443aecbf5848c5f284e73a0e2fca7f13c0f605277e48a141a3cc5c8f2ec0
- SSDEEP 3072:3FGe+hKzx43/fJc5DkvtaYbxkyh5fkJCbv4BFanuqucgS4mjgqN0do2bCEnbElGU:1qGM5v4BFanuVb0ULnrfYQanEbcwG
- TLSH T12A74381AFAA514F1D0B7D038C982651AFE717CAA8370A7DB27945A572F237E0AD3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ghostid_cli.exe
Resource
win10ltsc2021-20260513-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target ghostid_cli.exe
- Size 355KB
- SHA256 c02d4122eaa0fdb5f69d6bb34cedde873141565da8b867051dc9f9962886c54a
- MD5 0594a3b6cabe9fd71e0d68c1ccecd1ae
- SHA1 aa8bbf3a050721dd00bd7d8a2465bae981b926aa
- SHA512 5b959b9f31054cd8e7afc00ed0fbb014044e0987c2b9abfe14493b7c0ceb3e4ce045443aecbf5848c5f284e73a0e2fca7f13c0f605277e48a141a3cc5c8f2ec0
- SSDEEP 3072:3FGe+hKzx43/fJc5DkvtaYbxkyh5fkJCbv4BFanuqucgS4mjgqN0do2bCEnbElGU:1qGM5v4BFanuVb0ULnrfYQanEbcwG
- TLSH T12A74381AFAA514F1D0B7D038C982651AFE717CAA8370A7DB27945A572F237E0AD3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.