General

  • Target
    ghosty.exe
  • Size 7.5MB
  • Sample260930-yqscsstfle
  • SHA256 0211e39ad6829b42d1b2197c1d4ba0cced67cc0d9683671ee8ce660201af0375
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • ghosty.exe
    .exe 7.5MB

ghosty.exe

  • IMPHASH babfc5e8d8b43177a9e4bec8e52d4b49
  • SHA256 0211e39ad6829b42d1b2197c1d4ba0cced67cc0d9683671ee8ce660201af0375
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5f:b6:6c:bb:8f:e8:b4:b5:84:05:55:cd:df:b5:f8:15:37:89:92:8c:d1:68:49:a3:77:ff:9e:3f:49:e2:22:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NEXT RMM SOLUTIONS S.R.L.,O=NEXT RMM SOLUTIONS S.R.L.,L=Brasov,ST=Brasov,C=RO
Minor OS version
0
Major OS version
6
Entry point
5083392
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ghosty.pdb