General
- Target GhostX.exe
- Size 34.6MB
- Sample260823-bheqea1fqc
- SHA256 b637323f6e8eafb55da9d202df5d0dc891b5b131eec596023b33e9f8bb47316f
- MD5 a7e86662880516e480658e81607e7127
- SHA1 015631f7b8703e7ed4b6f930c14d0549c8bcae84
- SHA512 441a8a88339d7d8bfa6949fd354f7c13a5ea8d945f55ef57e6a393860d6bbaf0a58ec0c66ce3e16bdbc6f293ac39adf15332c6b076d6fabcb2f409dc246230bc
- SSDEEP 786432:sgSrdriL1ovqVfHVD/6GVh95v9ZMgvE1ZnjrOY8:udre1dVD6GVh3kgsDrOY8
- TLSH T1528723A21E178A18C65EEFF48D55699D0CC07B985C28F229C48E24AEBC3D45CD7D23F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GhostX.exe
Resource
win10ltsc2021-20260513-en
13 signatures
30 seconds
Malware Config
Targets
-
- Target GhostX.exe
- Size 34.6MB
- SHA256 b637323f6e8eafb55da9d202df5d0dc891b5b131eec596023b33e9f8bb47316f
- MD5 a7e86662880516e480658e81607e7127
- SHA1 015631f7b8703e7ed4b6f930c14d0549c8bcae84
- SHA512 441a8a88339d7d8bfa6949fd354f7c13a5ea8d945f55ef57e6a393860d6bbaf0a58ec0c66ce3e16bdbc6f293ac39adf15332c6b076d6fabcb2f409dc246230bc
- SSDEEP 786432:sgSrdriL1ovqVfHVD/6GVh95v9ZMgvE1ZnjrOY8:udre1dVD6GVh3kgsDrOY8
- TLSH T1528723A21E178A18C65EEFF48D55699D0CC07B985C28F229C48E24AEBC3D45CD7D23F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger