Analysis
- max time kernel
899s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 15:22
Static task
static1
Behavioral task
behavioral1
Sample
Ghost.zip
Resource
win10v2004-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
Ghost.zip
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
General
- Target Ghost.zip
- Size 102.2MB
- Sample260809-sscr8s1alg
- SHA256 e871e652193ddfb4b113479f3094b4a579fe4f9262abffdfab4549959c0183ab
- MD5 7315ce704220ab03d86e9bf19d134c94
- SHA1 296ba3063d8ab8a6b8ca229557a81dc8b1709ce6
- SHA512 3cb5282f21dee851791028c487387b7465a7db4879d0a3061d2139f78f55e31b2cd1a37c03b50b474dc038ff5332be7ffc39edd31b7447397f2bc293c5ba1e2f
- SSDEEP 1572864:Nu9gxIGf+RcxPFpcX7bHKcUDXbDytSNeup1VV8+YcLDf9X+vCODWHp7mp:NrxIcrFpcvBWXb+tvy1H1ht+vNDWHpW
- TLSH T17D3833285BB0ACBCD3B603F9BC2D1B7D649AB05941085E470C9D5ADCE887BA7D5F8780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Ghost.zip1⤵PID:4220
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4588
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4916