Analysis
- user interaction
yes - max time kernel
20s - max time network
14s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 12:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ghost-Client.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ghost-Client.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
General
- Target Ghost-Client.exe
- Size 661KB
- Sample261030-paembsds2p
- SHA256 4e454aca377c0524077b22141308c551dca6610de68d0ae7b24751ce4836520f
- MD5 3ed1c7cff1bcc95c6a9159690422b82d
- SHA1 bce6b1ba7158c622a6f94cdfe7bb1019292b2e9b
- SHA512 018dd9b44c229d52e1841b3482b9bc977ad7d21299a2dfd981dece0393f9447da3721422b590f3b1f3bf32d6ece7438cd4456feba67899ac3f63c3468fbd6e1d
- SSDEEP 12288:4eydXuRzHKECDADRDfeVPtkyUA5YiQns2N/S8u4:4e2X4HKdDoY0yqiQnTN/i4
- TLSH T1E3E48E42F2A580ECC02A91398956E61FEB363C54072056CB73D07B991FB76E16FB7712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe 4628 Ghost-Client.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4628 Ghost-Client.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4628 Ghost-Client.exe