Overview

overview

3

Static

static

3

ghost.exe

windows10-2004-x64

1

ghost.exe

windows11-ltsc_2024-x64

1

ghost_host.exe

windows10-2004-x64

1

ghost_host.exe

windows11-ltsc_2024-x64

1

ghost_lab.exe

windows10-2004-x64

1

ghost_lab.exe

windows11-ltsc_2024-x64

1

ghost_sandbox.exe

windows10-2004-x64

1

ghost_sandbox.exe

windows11-ltsc_2024-x64

1

sandbox_shim.dll

windows10-2004-x64

1

sandbox_shim.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    ghost-sandbox-windows-x64.zip
  • Size 6.5MB
  • Sample261030-xgdbva1vb1
  • SHA256 63e25b8f215b6ec7b689e887c0e49d9906a23647dc64039518b6b746df0fcda8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Targets

    • Target
      ghost.exe
    • Size 1.7MB
    • SHA256 4dbd00a921838e17b80d86dc829f2655eac2d2525c3317d5797256012f15623c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      ghost_host.exe
    • Size 139KB
    • SHA256 c80a1379c64df1ab31d34df8efeef0c8047ff1fd176dfefeff9f6b38c2c2b905
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      ghost_lab.exe
    • Size 1.4MB
    • SHA256 b5dbaa8841d8ca1d11abedf910f4ec7bee4fd0b8f6b8b4396e3f72a49779a577
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      ghost_sandbox.exe
    • Size 12.5MB
    • SHA256 29d9873129a3ac257e7825057232e60ccb02f837548ee54414e7595201701916
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      sandbox_shim.dll
    • Size 342KB
    • SHA256 33fb43d74a21c26c7c1290f70676f655d60449c2b2b6ab4e476af6d454613996
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks