Analysis

  • max time kernel
    148s
  • max time network
    128s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 05:00

General

  • Target
    Ghost/Microsoft.Spark.Worker.exe
  • Size 62KB
  • Sample261024-fm95bsswby
  • SHA256 4674c82b4f6086d56e0a74aea72a268de453b94153adf591bb321a9faca5ff91
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ghost\Microsoft.Spark.Worker.exe
    "C:\Users\Admin\AppData\Local\Temp\Ghost\Microsoft.Spark.Worker.exe"
    1⤵
      PID:3004

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/3004-0-0x0000028C1D070000-0x0000028C1D084000-memory.dmp

          memory/3004-1-0x00007FFE7C94F000-0x00007FFE7C950000-memory.dmp

          memory/3004-2-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp

          memory/3004-3-0x0000028C376C0000-0x0000028C3834E000-memory.dmp

          memory/3004-4-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp

          memory/3004-5-0x00007FFE7C7C0000-0x00007FFE7D164000-memory.dmp