3e6c40a43f1e0d42d4ff249b270327037f2f1303f94faeadd0fdfab1437914cd | Triage™

Login
Reports

Overview

overview

7

Static

static

3

ghost_payload.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
ghost_payload.exe
Size 34.2MB
Sample261030-danpfsdb24
SHA256 3e6c40a43f1e0d42d4ff249b270327037f2f1303f94faeadd0fdfab1437914cd
MD5 c5d5d8531b6f0f13e6c96a2f23c320d2
SHA1 7be594ec3bb72bcf8bd4d569172819826cbac83a
SHA512 bdefd3f7e3ceb8f7be4a34438e29c7a77cdca46428a75f43c5db9e04debf46ed33fde12b4d07fa22d6ae892d059f2f0eb8f2a1e56384cefccfe595f21f29d4d4
SSDEEP 786432:D21nbhVEHCYFqNW86mL60nCmyjiQ1j9dZ62s872I00LhXMk3yD0QMO:y1tWPmPnCmyXVpF7RLlTDO
TLSH
T1917733B5339A84D8F1D1D57055930E6123A778590BA0C2AE4BE485622DBF3F8BF34B93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ghost_payload.exe

Resource

win11-20260911-en

windows11-21h2-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  ghost_payload.exe
- Size 34.2MB
- SHA256 3e6c40a43f1e0d42d4ff249b270327037f2f1303f94faeadd0fdfab1437914cd
- MD5 c5d5d8531b6f0f13e6c96a2f23c320d2
- SHA1 7be594ec3bb72bcf8bd4d569172819826cbac83a
- SHA512 bdefd3f7e3ceb8f7be4a34438e29c7a77cdca46428a75f43c5db9e04debf46ed33fde12b4d07fa22d6ae892d059f2f0eb8f2a1e56384cefccfe595f21f29d4d4
- SSDEEP 786432:D21nbhVEHCYFqNW86mL60nCmyjiQ1j9dZ62s872I00LhXMk3yD0QMO:y1tWPmPnCmyXVpF7RLlTDO
- TLSH
  T1917733B5339A84D8F1D1D57055930E6123A778590BA0C2AE4BE485622DBF3F8BF34B93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

© 2018-2026

Terms | Privacy