General
- Target 8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9
- Size 7.0MB
- Sample260626-xerrfsd14s
- SHA256 8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9
- MD5 8ad67a1b7a5f2428c93f7a13a398e39c
- SHA1 d4f71fc5479a02c8ff57c90fc67b948adb5604e0
- SHA512 57475600b531b3b80936bf3015d5a38bba61cfac793cb4de9985d4e4b0afdc12f7f591ecdc8e9f9fd2dcb7b0e3d2fe851f33f80ba2888730774f73ac8ab34b5c
- SSDEEP 98304:UNmXStQHQu1OCUPExButIaUgF246UZ0R+xp2exp2U3KQ5KntG:2Bt2Qu1OAxW2kyRU913KQ
- TLSH T193767C47EC9585A9C1AAE334C9A292537A717C485B3123D32F90F7382F77BD06AB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
ghostlocker
C2
-
http://94.103.91.246/addInfection
Targets
-
- Target 8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9
- Size 7.0MB
- SHA256 8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9
- MD5 8ad67a1b7a5f2428c93f7a13a398e39c
- SHA1 d4f71fc5479a02c8ff57c90fc67b948adb5604e0
- SHA512 57475600b531b3b80936bf3015d5a38bba61cfac793cb4de9985d4e4b0afdc12f7f591ecdc8e9f9fd2dcb7b0e3d2fe851f33f80ba2888730774f73ac8ab34b5c
- SSDEEP 98304:UNmXStQHQu1OCUPExButIaUgF246UZ0R+xp2exp2U3KQ5KntG:2Bt2Qu1OAxW2kyRU913KQ
- TLSH T193767C47EC9585A9C1AAE334C9A292537A717C485B3123D32F90F7382F77BD06AB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file