Resubmissions

22/07/2026, 05:58

260722-gphcrsbb958

21/07/2026, 07:55

260721-jsglraas5n8

21/07/2026, 07:49

260721-jn7mdabx4t7

General

  • Target
    bin.rar
  • Size 1.7MB
  • Sample260722-gphcrsbb95
  • SHA256 b8e10c34b86d4ba87f8ff6cdb971d46907c1c6e7df714bf9c7c8d53efc99a3c5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 3 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • bin.rar
    .rar 1.7MB
  • bin/GhostClient.exe
    .exe 147KB
  • bin/GhostDriver.sys
    .sys 13KB
  • bin/GhostFN.exe
    .exe 933KB
  • bin/detectedstockkdmapper.exe
    .exe 1.1MB
  • bin/msvcp140d.dll
    .dll 977KB
  • bin/ucrtbase.dll
    .dll 999KB
  • bin/ucrtbased.dll
    .dll 1.7MB
  • bin/vcruntime140_1d.dll
    .dll 58KB
  • bin/vcruntime140d.dll
    .dll 128KB

bin.rar

  • SHA256 b8e10c34b86d4ba87f8ff6cdb971d46907c1c6e7df714bf9c7c8d53efc99a3c5
  • MD5 SHA1 SHA512 SSDEEP TLSH