Overview

overview

7

Static

static

3

Ghost-Prox....0.exe

windows10-2004-x64

7

Ghost-Prox....0.exe

windows11-ltsc_2024-x64

7

main.pyc

windows10-2004-x64

3

main.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Ghost-Proxy-Checker-v3.0.exe
  • Size 33.9MB
  • Sample260722-bl2z4sbr5z
  • SHA256 a12b0bd25531b308ba501a241df3aaf808591677d07f3007a43dcb98e182c8be
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionpyinstaller

Malware Config

Targets

    • Target
      Ghost-Proxy-Checker-v3.0.exe
    • Size 33.9MB
    • SHA256 a12b0bd25531b308ba501a241df3aaf808591677d07f3007a43dcb98e182c8be
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      main.pyc
    • Size 8KB
    • SHA256 dd2aac9b1d16c18cd7796f1b79daeb9b264a6de84b672c0cedbc3ae6162c1171
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks