ab2c70979a62863939992cfa7033073765b2dbe7365827e2fb966fb11b62d9ee | Triage™

Login
Reports

Overview

overview

7

Static

static

3

ghost_payload.exe

windows11-21h2-x64

7

Resubmissions

30/10/2026, 02:48

261030-dajeqsgx8t

30/10/2026, 02:45

261030-c8qq2agx7x7

Sharing

Copy URL Twitter E-mail

General

Target
ghost_payload.exe
Size 34.2MB
Sample261030-c8qq2agx7x
SHA256 ab2c70979a62863939992cfa7033073765b2dbe7365827e2fb966fb11b62d9ee
MD5 7229b9af1447cf46c8956583486685bd
SHA1 c544ab54ab8ca98dc6d6a54a9ecfb577d16ecbe4
SHA512 837721d73852aecbf30ab22aec9a69164e6c72e998e779ca7e1c84f244b08b0591f4c59108a61924fbf063f7635565253f64cbd15963040b54b329898b63f693
SSDEEP 786432:m21nbhVEHCYFqNW8PL60nCmyjiQ1j9dZ62s872I00LhXMk3yD0QMO:j1tW6PnCmyXVpF7RLlTDO
TLSH
T1707733F533DA84C8F5D1D57055930EA123A7745D0BA0C2AE4BE485621DBE2E8BF38793
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ghost_payload.exe

Resource

win11-20260911-en

windows11-21h2-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  ghost_payload.exe
- Size 34.2MB
- SHA256 ab2c70979a62863939992cfa7033073765b2dbe7365827e2fb966fb11b62d9ee
- MD5 7229b9af1447cf46c8956583486685bd
- SHA1 c544ab54ab8ca98dc6d6a54a9ecfb577d16ecbe4
- SHA512 837721d73852aecbf30ab22aec9a69164e6c72e998e779ca7e1c84f244b08b0591f4c59108a61924fbf063f7635565253f64cbd15963040b54b329898b63f693
- SSDEEP 786432:m21nbhVEHCYFqNW8PL60nCmyjiQ1j9dZ62s872I00LhXMk3yD0QMO:j1tW6PnCmyXVpF7RLlTDO
- TLSH
  T1707733F533DA84C8F5D1D57055930EA123A7745D0BA0C2AE4BE485621DBE2E8BF38793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

© 2018-2026

Terms | Privacy