win.ghostengine
Malware Family1 indicators of compromise attributed to win.ghostengine across abuse.ch threat intelligence feeds.
Domains
0
IPs
0
URLs
1
Hashes
0
Download indicators
Indicator lists for this family. Free and anonymous downloads are a 10% sample.
Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.
Threat types
Payload Delivery
Sample indicators
| Indicator | Type |
|---|---|
| https://ghostloader.xyz//loader/build_87390/encrypted/stage2.exe | url |