2026-11-02_c8f3014c1a6e04cb2343bf13dd7e6fea_ghostlocker

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-02_c8f3014c1a6e04cb2343bf13dd7e6fea_ghostlocker
Size 37.1MB
Sample261102-2tesnaxvbs
SHA256 24f2e815f8f8119cc537756050b905fa8e6eaff9d7cf67061843aaa2afc83ae9
MD5 c8f3014c1a6e04cb2343bf13dd7e6fea
SHA1 6e5a902b59d503503f223f30effc0882ea8c64d0
SHA512 e00a7dffdfc6efa1ec8b4fa85ba55c31fbe9c7df6d8f3797ebd0bdc5853b7223873579d2c6e79137affb81d967a56481b7b6f6605b9d972a941e8e9747d91e2e
SSDEEP 98304:4jcRyeelsfqfPcBedBTc9zDQrrNd1j6ZktpAljGFpUE757MPXRPulLc4Ka0aIok:pRyGf9BqQQrZdII/3MPVutK1
TLSH
T168876BADBE40DC9BD8DD9E3DB069274172B4785A72B60B23F95C9A750FC22D83D20172
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-02_c8f3014c1a6e04cb2343bf13dd7e6fea_ghostlocker

File Explorer

2026-11-02_c8f3014c1a6e04cb2343bf13dd7e6fea_ghostlocker

.exe 37.1MB

2026-11-02_c8f3014c1a6e04cb2343bf13dd7e6fea_ghostlocker

IMPHASH badfdd7bd1db7c29e3c0c5b5b635a094
SHA256 24f2e815f8f8119cc537756050b905fa8e6eaff9d7cf67061843aaa2afc83ae9
MD5 c8f3014c1a6e04cb2343bf13dd7e6fea
SHA1 6e5a902b59d503503f223f30effc0882ea8c64d0
SHA512 e00a7dffdfc6efa1ec8b4fa85ba55c31fbe9c7df6d8f3797ebd0bdc5853b7223873579d2c6e79137affb81d967a56481b7b6f6605b9d972a941e8e9747d91e2e
SSDEEP 98304:4jcRyeelsfqfPcBedBTc9zDQrrNd1j6ZktpAljGFpUE757MPXRPulLc4Ka0aIok:pRyGf9BqQQrZdII/3MPVutK1
TLSH
T168876BADBE40DC9BD8DD9E3DB069274172B4785A72B60B23F95C9A750FC22D83D20172
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStdHandle GetConsoleMode TlsGetValue GetLastError SetLastError RaiseException GetTickCount ExitProcess GetStartupInfoA GetCommandLineW GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameW GetModuleHandleA SetThreadStackGuarantee GetProcessHeap HeapAlloc HeapFree HeapReAlloc VirtualAlloc VirtualFree WriteFile ReadFile CloseHandle SetFilePointer SetEndOfFile GetSystemInfo LoadLibraryW GetProcAddress FreeLibrary FormatMessageW GetFileType CreateFileW GetConsoleOutputCP GetOEMCP TlsAlloc TlsSetValue CreateThread ExitThread Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject GetExitCodeThread SetThreadPriority GetThreadPriority GetCurrentThread OpenThread IsDebuggerPresent CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection VirtualQuery GetModuleFileNameA WideCharToMultiByte GetCommandLineA MultiByteToWideChar GetACP GetConsoleCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwindEx FormatMessageA LoadLibraryA FindResourceA FindResourceExA EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA GlobalAddAtomA GetWindowsDirectoryA GetVersionExA CompareStringA GetLocaleInfoA GetDateFormatA EnumCalendarInfoA CompareStringW GetLocaleInfoW GetDateFormatW FreeResource LockResource GlobalAlloc GlobalReAlloc GlobalSize GlobalLock GlobalUnlock LocalFree GetExitCodeProcess LoadResource SizeofResource GlobalDeleteAtom MulDiv GetLocalTime GetTimeZoneInformation GetTickCount64 PeekNamedPipe GetCPInfo GetThreadLocale SetThreadLocale GetUserDefaultLCID

user32

MessageBoxA CharUpperBuffW CharLowerBuffW SendMessageA PostMessageA DefWindowProcA CallWindowProcA RegisterClassA UnregisterClassA GetClassInfoA CreateWindowExA RegisterClipboardFormatA GetClipboardFormatNameA CharToOemA CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetMenuItemInfoA SetPropA GetPropA RemovePropA EnumPropsA GetWindowLongA SetWindowLongA GetClassLongA SetClassLongPtrA GetClassNameA LoadBitmapA LoadCursorA LoadIconA LoadImageA SystemParametersInfoA DispatchMessageW PeekMessageW SendMessageW DefWindowProcW CallWindowProcW RegisterClassW UnregisterClassW GetClassInfoW CreateWindowExW InsertMenuItemW GetMenuItemInfoW SetMenuItemInfoW DrawTextW DrawStateW SetWindowTextW GetWindowTextW GetWindowTextLengthW MessageBoxW GetWindowLongPtrW SetWindowLongPtrW DefFrameProcW DefMDIChildProcW TranslateMessage GetDoubleClickTime IsWindow IsMenu DestroyWindow ShowWindow ShowWindowAsync MoveWindow SetWindowPos GetWindowPlacement SetWindowPlacement BeginDeferWindowPos DeferWindowPos EndDeferWindowPos IsWindowVisible IsIconic BringWindowToTop IsZoomed OpenClipboard CloseClipboard SetClipboardData GetClipboardData CountClipboardFormats EnumClipboardFormats EmptyClipboard IsClipboardFormatAvailable SetFocus GetActiveWindow GetFocus GetKeyState GetCapture SetCapture ReleaseCapture MsgWaitForMultipleObjects SetTimer KillTimer EnableWindow IsWindowEnabled GetSystemMetrics GetMenu SetMenu DrawMenuBar GetSystemMenu CreateMenu CreatePopupMenu DestroyMenu EnableMenuItem GetSubMenu GetMenuItemCount RemoveMenu DeleteMenu GetMenuItemRect UpdateWindow SetActiveWindow GetForegroundWindow SetForegroundWindow WindowFromDC GetDC GetDCEx GetWindowDC ReleaseDC BeginPaint EndPaint GetUpdateRect SetWindowRgn InvalidateRect InvalidateRgn RedrawWindow ScrollWindowEx ShowScrollBar EnableScrollBar GetClientRect GetWindowRect AdjustWindowRectEx MessageBeep SetCursorPos SetCursor GetCursorPos CreateCaret DestroyCaret HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen ScreenToClient MapWindowPoints WindowFromPoint GetSysColor GetSysColorBrush SetSysColors DrawFocusRect FillRect FrameRect SetRect InflateRect IntersectRect OffsetRect GetDesktopWindow GetParent SetParent EnumThreadWindows GetTopWindow GetWindowThreadProcessId GetLastActivePopup GetWindow CallNextHookEx DestroyCursor DestroyIcon CopyImage CreateIconIndirect GetIconInfo SetScrollInfo GetScrollInfo TranslateMDISysAccel DrawEdge DrawFrameControl TrackPopupMenuEx ChildWindowFromPointEx DrawIconEx FlashWindowEx GetAncestor

advapi32

RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey RegFlushKey

gdi32

CreateFontIndirectA EnumFontFamiliesA GetCharABCWidthsA GetTextExtentPointA GetTextMetricsA GetObjectA ExtTextOutA CreateFontIndirectW EnumFontFamiliesExW GetCharABCWidthsW GetTextExtentPoint32W GetTextExtentExPointW GetObjectW TextOutW ExtTextOutW GetRandomRgn Arc BitBlt Chord CombineRgn CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBitmap CreateEllipticRgn CreatePen CreatePenIndirect CreatePatternBrush CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteObject Ellipse EqualRgn ExcludeClipRect ExtCreateRegion ExtFloodFill FillRgn GetROP2 GetBkColor GetBitmapBits GetClipBox GetClipRgn GetCurrentObject GetDeviceCaps GetDIBits GetMapMode GetObjectType GetPixel GetRegionData GetRgnBox GetStockObject GetTextAlign GetTextColor GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx IntersectClipRect LineTo MaskBlt OffsetRgn PatBlt Pie PaintRgn PtInRegion RectInRegion RectVisible Rectangle RestoreDC RealizePalette RoundRect SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetMapMode SetPixel SetPolyFillMode StretchBlt SetRectRgn SetROP2 SetStretchBltMode SetTextCharacterExtra SetTextColor SetTextAlign CreateDIBSection SetArcDirection ExtCreatePen MoveToEx CreatePolygonRgn DPtoLP LPtoDP Polygon Polyline PolyBezier SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx SetBrushOrgEx GetDCOrgEx

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

shell32

DragQueryFileA DragQueryFileW DragFinish DragAcceptFiles

ole32

OleInitialize OleUninitialize OleCreateFromFile OleSetContainedObject CreateILockBytesOnHGlobal CoUninitialize CoInitialize StgCreateDocfile StgCreateDocfileOnILockBytes GetErrorInfo

oleaut32

SysFreeString SafeArrayCreate SafeArrayRedim SafeArrayGetUBound SafeArrayGetLBound SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement SafeArrayPutElement SafeArrayPtrOfIndex VariantChangeTypeEx VariantClear VariantCopy VariantInit

comctl32

InitCommonControls ImageList_Create ImageList_Destroy ImageList_GetImageCount ImageList_SetImageCount ImageList_Add ImageList_Replace ImageList_AddMasked ImageList_DrawEx ImageList_DrawIndirect ImageList_Remove ImageList_Copy ImageList_BeginDrag ImageList_EndDrag ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock _TrackMouseEvent

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

143KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

728KB

Virtual Size

727KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

127KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

391KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

458KB

Virtual Size

457KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

28.5MB

Virtual Size

28.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-02_c8f3014c1a6e04cb2343bf13dd7e6fea_ghostlocker

kernel32

user32

advapi32

gdi32

version

shell32

ole32

oleaut32

comctl32

generic