General
- Target GhostyLite.exe
- Size 2.8MB
- Sample260804-wbjq1aee55
- SHA256 29db0210d424a4cb8adb1102e215a4a74aa29e27c3cc3a934ea8ecad14cfeaac
- MD5 86c1418b4794b9c38b5e115e40f25681
- SHA1 829c237f9debb669595640f699a764b9c5d1382f
- SHA512 00a1b0995f6e779561bee750695e268f28edb2a35b6e4c8a9ea6c48b60536749d69ed13f43026c64b82aa845cd9b955e5aa0c9efc2fda4457589de927a4b9b7d
- SSDEEP 49152:ElKOLVCGr/FMfZmC+uMCAKKVSC+uMhun6Ta:wVlrac7KKPchC
- TLSH T15ED5E145F2A701D8C5A78138872AA31BEB723045073257CF6BE51A567F27EE22B7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GhostyLite.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
GhostyLite.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target GhostyLite.exe
- Size 2.8MB
- SHA256 29db0210d424a4cb8adb1102e215a4a74aa29e27c3cc3a934ea8ecad14cfeaac
- MD5 86c1418b4794b9c38b5e115e40f25681
- SHA1 829c237f9debb669595640f699a764b9c5d1382f
- SHA512 00a1b0995f6e779561bee750695e268f28edb2a35b6e4c8a9ea6c48b60536749d69ed13f43026c64b82aa845cd9b955e5aa0c9efc2fda4457589de927a4b9b7d
- SSDEEP 49152:ElKOLVCGr/FMfZmC+uMCAKKVSC+uMhun6Ta:wVlrac7KKPchC
- TLSH T15ED5E145F2A701D8C5A78138872AA31BEB723045073257CF6BE51A567F27EE22B7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.