General
- Target ScreenLockGhostnet.exe
- Size 11.5MB
- Sample260826-tmlzdsztdw
- SHA256 a4b57c7a9bea2c3b44ebfb5ab43b5511a5ad6d1f238eed10a558ab3a8d8495fe
- MD5 3b51ff38b967b163ecb5bd5495df9a14
- SHA1 b2cd938ca12ce538432ff1382405406d50fe8e07
- SHA512 c7ddb766e80be176f17a2c861f86ebe77856866a6d4a8f17011cd5dd3429620fe024f526b45bc665045a59b56d4a90c5eee9ab9b0dc10071c23146e00af03c01
- SSDEEP 196608:Yhcd3w0AEY3l9XEpXnH2ph1iut1/1QpL0uQg+U+02XhwjC5ykiHJkGtK7voKgpVs:YhA1FY19XEAphVtrQSg+nFoIykz2K7vh
- TLSH T16AC6339833844DA5F8BF023CA9C09A22A3F1B8512BA5D6EB1BF14D150D376E8DF74B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
ScreenLockGhostnet.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
screenlock.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ScreenLockGhostnet.exe
- Size 11.5MB
- SHA256 a4b57c7a9bea2c3b44ebfb5ab43b5511a5ad6d1f238eed10a558ab3a8d8495fe
- MD5 3b51ff38b967b163ecb5bd5495df9a14
- SHA1 b2cd938ca12ce538432ff1382405406d50fe8e07
- SHA512 c7ddb766e80be176f17a2c861f86ebe77856866a6d4a8f17011cd5dd3429620fe024f526b45bc665045a59b56d4a90c5eee9ab9b0dc10071c23146e00af03c01
- SSDEEP 196608:Yhcd3w0AEY3l9XEpXnH2ph1iut1/1QpL0uQg+U+02XhwjC5ykiHJkGtK7voKgpVs:YhA1FY19XEAphVtrQSg+nFoIykz2K7vh
- TLSH T16AC6339833844DA5F8BF023CA9C09A22A3F1B8512BA5D6EB1BF14D150D376E8DF74B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Loads dropped DLL
-
- Target screenlock.pyc
- Size 24KB
- SHA256 f01fd14c530f5ab9fc83a737184d361ffb8624a5f736278a34e3c3e1eca99f91
- MD5 1fc66dca670e7c4473946bcea2b76774
- SHA1 6b844d5315d43b372e3c531538fe2c24852c66b5
- SHA512 4d73b674b6f0ff17e5ff11edbe62fa517fd5d54cfef28f7e48ea77e433b494b8ed1a5d89d8edcf0733dd518f983b1be9f6d3a66bfdd462cf2e67a054fd60f297
- SSDEEP 384:qDzEhJz35J7MQqaDn4uPJKdaotvDp8t56+yDVvXfe4Lgi:qDIhTJgQqA4uxKdaKDV/flgi
- TLSH T1FFB2F7B4ED24AA17FE3AFA7431EBA610B73185867510E607E0345CBE7CF9661CA5031E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10