Overview
overview
7Static
static
3Krypt_Ghos....0.exe
windows10-2004-x64
7Krypt_Ghos....0.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1resources/.../WHEEL
windows10-2004-x64
3resources/.../WHEEL
windows11-ltsc_2024-x64
3resources/...ICENSE
windows10-2004-x64
3resources/...ICENSE
windows11-ltsc_2024-x64
3resources/...TALLER
windows10-2004-x64
3resources/...TALLER
windows11-ltsc_2024-x64
3resources/...TADATA
windows10-2004-x64
3resources/...TADATA
windows11-ltsc_2024-x64
3resources/...RECORD
windows10-2004-x64
3resources/...RECORD
windows11-ltsc_2024-x64
3resources/.../WHEEL
windows10-2004-x64
3resources/.../WHEEL
windows11-ltsc_2024-x64
3resources/...ts.txt
windows10-2004-x64
1resources/...ts.txt
windows11-ltsc_2024-x64
1resources/...RS.rst
windows10-2004-x64
3resources/...RS.rst
windows11-ltsc_2024-x64
3resources/...ICENSE
windows10-2004-x64
3resources/...ICENSE
windows11-ltsc_2024-x64
3resources/...el.txt
windows10-2004-x64
1resources/...el.txt
windows11-ltsc_2024-x64
1General
- Target Krypt_Ghost-Setup-1.0.0.exe
- Size 115.8MB
- Sample260820-2p62cazyds
- SHA256 3892fa7868989f5ac23db08c44302f77307d30cac2809203e7cd622ab4f7b837
- MD5 0af83e58a15d328fcce1dc3811dc6a4f
- SHA1 22cd0c68a37fd504d8ef9a3c3940b5ede91ccf6f
- SHA512 2111e354bcbe575d2bb4e90125eff9919f550bdb8cfe275b342d02f9553a1295036f10df841211d4512e7dc09896cf0d38d5c0471e73f5ddfd34408170547311
- SSDEEP 3145728:z8TJ6qJA5HI3buwPS9XNP1M1nCaVIwE+eZl6EzYNoR2II:4d6P+3bj6ljm9InE6BI
- TLSH T13A48339C5004107FC1E26FB3AD340E49A1BE7E646A7278051EE4B3F46EBB5E7D1BA484
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Krypt_Ghost-Setup-1.0.0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Krypt_Ghost-Setup-1.0.0.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
resources/pmd3/bin/ghost/_internal/xmod-1.10.0.dist-info/WHEEL
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
resources/pmd3/bin/ghost/_internal/xmod-1.10.0.dist-info/WHEEL
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
resources/pmd3/bin/ghost/_internal/xmod-1.10.0.dist-info/licenses/LICENSE
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
resources/pmd3/bin/ghost/_internal/xmod-1.10.0.dist-info/licenses/LICENSE
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/INSTALLER
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/INSTALLER
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/METADATA
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/METADATA
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/RECORD
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/RECORD
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/WHEEL
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/WHEEL
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/entry_points.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/entry_points.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/licenses/AUTHORS.rst
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/licenses/AUTHORS.rst
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/licenses/LICENSE
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/licenses/LICENSE
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/top_level.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/top_level.txt
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Krypt_Ghost-Setup-1.0.0.exe
- Size 115.8MB
- SHA256 3892fa7868989f5ac23db08c44302f77307d30cac2809203e7cd622ab4f7b837
- MD5 0af83e58a15d328fcce1dc3811dc6a4f
- SHA1 22cd0c68a37fd504d8ef9a3c3940b5ede91ccf6f
- SHA512 2111e354bcbe575d2bb4e90125eff9919f550bdb8cfe275b342d02f9553a1295036f10df841211d4512e7dc09896cf0d38d5c0471e73f5ddfd34408170547311
- SSDEEP 3145728:z8TJ6qJA5HI3buwPS9XNP1M1nCaVIwE+eZl6EzYNoR2II:4d6P+3bj6ljm9InE6BI
- TLSH T13A48339C5004107FC1E26FB3AD340E49A1BE7E646A7278051EE4B3F46EBB5E7D1BA484
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app-64.7z
- Size 114.8MB
- SHA256 49f5d58d3b082c4d40d3635d3e2d1f715585d45d13bd5f101837c31037984439
- MD5 febdbe9dcbd539e540ed4268122b8b91
- SHA1 924504dd8e6e99d7eb3a0a6c44a1b280224fd976
- SHA512 118c24b221ede8a740157757d1eeff8e671cdcaf5f58f67615a9d6e248c4dfd7a524de5093d85f4b74391535e201ff185cc396309e2f0a580e982389f7e4c65b
- SSDEEP 3145728:/TJ6qJA5HI3buwPS9XNP1M1nCaVIwE+eZl6EzYNoR2Iu:/d6P+3bj6ljm9InE6Bu
- TLSH T1314833AC6045207FC1D2BEB7A6244E4DB1FC70A5127338451BF483F46D8B96AE5BB8C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/pmd3/bin/ghost/_internal/xmod-1.10.0.dist-info/WHEEL
- Size 87B
- SHA256 41c708c5adba6e097513ab8ccb9f1d7865a2fb469e22491a9e01dcc64da459fc
- MD5 7412a649a466b9dd567141f836b1e222
- SHA1 c0469b77bdc66a90f54f6456522a384c7d92728c
- SHA512 49119a9782509253afe7c6db60a607faa432c2aa4302f710f9dda77b713f3b3f627b97efe28bbe334df01a10d7f86bf2f975d539a5be456bfc56a0c384e1553a
- TLSH T125B01228014014F41810FF13402C70341720C105B4A52039D44601407507D1402EDC6A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xmod-1.10.0.dist-info/licenses/LICENSE
- Size 1KB
- SHA256 62b3ea944fccba08626521d44f6895a1dbaa96a992b4ca29f44130093765cc1c
- MD5 0583e5854f4f78566fd4ba1e48c7ecd8
- SHA1 2a02fdd7bd135bb82f172a072f453f1fb43bdd3f
- SHA512 ec62b8ccb5974593128e0895c496aa69246866d1a5775d0204f93c364314a81074d29ae12796955adb265092eb1823e99914522cd6dc4eb1fac4624c838302b4
- TLSH T10511752EB355077218AB13605578ACD5F23BB25F7A5F2A84246DF345233A06CD5FF840
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/INSTALLER
- Size 4B
- SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
- MD5 365c9bfeb7d89244f2ce01c1de44cb85
- SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
- SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
- MD5 SHA1 SHA512
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/METADATA
- Size 13KB
- SHA256 e3e52dab384f891c52b0b5738b2d2d97764bd4709745bb8b81c1c9211d927e29
- MD5 3c2aba430f64ffbf366e50d28bfd26d9
- SHA1 949c1777c391503123d5f21e05dc19cc9cf08ed1
- SHA512 e2eb5e4d5d0f65c276e8e13d1cfdfd32900f2ea2616f6671ce2d16c91d9c37fa5119d47a671057c31e40b812bde74ae066f99d8ed58f8f3087bfdaf46c972ce8
- SSDEEP 384:9a0BdULFJc6upt5coMfKTLrORYFya6mRRdXT8cx:9a0BdULFJc6upt5coqs+YT7D8K
- TLSH T10D5294D367A51F94DFC688C9A9CE51D6A316906BEC8D84CDF21D94DC478C2B642B22E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/RECORD
- Size 23KB
- SHA256 70061a6ac2e825e92795053c71485685c80ea5aff16d1326ca22ee917578e612
- MD5 840ec8daa761370f2dfba2c373ce7abe
- SHA1 7333bc1552b4b35b5863a00fa2a05190a53273ec
- SHA512 ad3fe09df60e77b3cc218a161dd4509dbf1bec0ba707b4192bf6920096731af873b91b771e4d3a26c7815ac3e1f7e9ccfb88ab224b2bd87f0fbede73a618e0e8
- SSDEEP 384:sTcTcuTrTjRX3lgSAotC79DeotFhXf5BaDgHnHvy:DSymHXXf5BM0vy
- TLSH T11BB2DE691699F21B3740179CC38C0721F94E6E81730F12AA597CA9E07B9DB84B35F6E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/WHEEL
- Size 93B
- SHA256 0f61de99cf354f7c65018272d4d0ecb8369b48ae28559b730ae5cae31d65d84d
- MD5 b342bdf2ace8f65de1d2bbc711d2fc35
- SHA1 9e9ce6fd5fb553b3d306340ee7b26b7e244a69a1
- SHA512 f2284741075832c1599d1e82fb9940839759bd2b7fec0b367d7ecc8e896a224e9436bf4ed82c6c294790c79cf994561ff4a967d58158a2629eb08da8cb292b9e
- TLSH T1C9B01215054004FC94A0E922407591202B708546989570BDF10A03446548D5806CDD5A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/entry_points.txt
- Size 363B
- SHA256 f3a65f99a18bb2d59b8ee0f90dddd05c7ddf50dc3f8c14a8b4631cec416ed6a2
- MD5 8656db43df058b97700e2f3f2a04515a
- SHA1 f896dfd86c900bf8db2b03d703d1fccde49f9961
- SHA512 a9d40f5509deaed636cdc7a65bf5d5aa436930ef81d5e03798b550957afc229dc3ac77b6626523400178cae2787b5a1025865c672382ec358673dc180dd958aa
- TLSH T181E048C946CA7C9853590F2F79D3384D618FE280B6569813AA615FA4C07DFC5A0245DA
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/licenses/AUTHORS.rst
- Size 5KB
- SHA256 0467529ce6d555c3a8bc483137d638148dea52d650a4d0fc954c385e0fb7aaa0
- MD5 82089b19d8bce7840a7fcc73b5b71ca8
- SHA1 64694925fb1268cb79d6e32bed9cc33fce2d11c3
- SHA512 52028b4e2552e82af0d8e69b7c7d405c39192419403e20dcdd732048e96805b0cc1dccb66a3ab141e1b4cb1e6241c8734fc59da9f7a2cd372ec8b3dab22bb070
- SSDEEP 96:2NfL9OSTdqpRLy8QS/XF40XUusm3DN9pLg7uMtKLtuXBvtGs0LMAjU8KFEFZUi:QfLpTdqpx34UUY3RzLg7wCtss0LDCFEn
- TLSH T17DB1C8D3FA3532991B17039CC24A48107CD9C0B1A136AC6DA5FD6D5E7B3D6A90D7C312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/licenses/LICENSE
- Size 1KB
- SHA256 f9ea6b8a39f29aff6d2ffd7f1613c490f7e8c1b15e3ceeacfb7fd81f86cc827e
- MD5 f23e11f8907149fc7fb7b26c86370f99
- SHA1 3b006afc18a661b9a9326325064f19c24c0425ef
- SHA512 252e2a1f9c144b2083564f1512905031556c382b83f114075e170c261e36e1d5082b61bcdb970a8fd014f0659a4ecb21242d558e4eb420b3160fb44b9a9d5c21
- TLSH T12A31866B154057EB86D2076135969AC4F15AD03D3B135C00387DE2543B3F83DE4BB081
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/pmd3/bin/ghost/_internal/xonsh-0.24.1.dist-info/top_level.txt
- Size 26B
- SHA256 e852b33983a265dc207571920d677b70732d4030622b90664193ddfefc49d918
- MD5 6a53d591d227a17544fb1d4dce17edfc
- SHA1 08dac97771ea28a70a07deb5b5e0fe118f545a7e
- SHA512 15eae13c255bdfe4d4dec95f84fe1a1a1e1a4f90f4f2042e02d78b40aaafc9a0fcbb000a5401d00c18aa4010726cd86cf611ac10575ffda9d8d1786b958ea7ca
- MD5 SHA1 SHA512
Score1/10