eef1ed6d3486cb9e2eac44171010afabf83b6db9c64145d2e2b931be3b49028b | Triage™

Login
Reports

Overview

overview

6

Static

static

1

GhostLoader.cs

windows10-ltsc_2021-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
GhostLoader.cs
Size 4KB
Sample260913-c53anaea78
SHA256 eef1ed6d3486cb9e2eac44171010afabf83b6db9c64145d2e2b931be3b49028b
MD5 f9b67a5b628db6a71213c9d9a92ba110
SHA1 5e2dff92da27a3623d722f6f52830e38e1e4b7a6
SHA512 eda30d590804d3f14eb814841e3ed31c1d99ed6bae01bcd95e0d8c69089c930ac364fbe06012a7a7802d24fbd5cccde7219364e70c28f5fee2165236424a1cd8
SSDEEP 96:CjN8MPB27LTG5aGSJniq1pQQE1nX6OJQtCLushheFV:FHSS0+FqnXgkLush2
TLSH
T174915558127F966164D3500E2BDBC65EBE63402B12BF9C2438FD8220EF4B46DC2767E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution persistence

Static task

static1

Behavioral task

behavioral1

Sample

GhostLoader.cs

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

11 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  GhostLoader.cs
- Size 4KB
- SHA256 eef1ed6d3486cb9e2eac44171010afabf83b6db9c64145d2e2b931be3b49028b
- MD5 f9b67a5b628db6a71213c9d9a92ba110
- SHA1 5e2dff92da27a3623d722f6f52830e38e1e4b7a6
- SHA512 eda30d590804d3f14eb814841e3ed31c1d99ed6bae01bcd95e0d8c69089c930ac364fbe06012a7a7802d24fbd5cccde7219364e70c28f5fee2165236424a1cd8
- SSDEEP 96:CjN8MPB27LTG5aGSJniq1pQQE1nX6OJQtCLushheFV:FHSS0+FqnXgkLush2
- TLSH
  T174915558127F966164D3500E2BDBC65EBE63402B12BF9C2438FD8220EF4B46DC2767E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution persistence
- Drops desktop.ini file(s)
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence

© 2018-2026

Terms | Privacy