Overview

overview

7

Static

static

7

Gatherum.exe

windows7-x64

1

Gatherum.exe

windows10-2004-x64

1

Gatherum.exe

windows7-x64

1

Gatherum.exe

windows10-2004-x64

1

PenImc_cor3.dll

windows7-x64

1

PenImc_cor3.dll

windows10-2004-x64

1

PresentationCore.dll

windows7-x64

1

PresentationCore.dll

windows10-2004-x64

1

PresentationUI.dll

windows7-x64

1

PresentationUI.dll

windows10-2004-x64

1

clretwrc.dll

windows7-x64

1

clretwrc.dll

windows10-2004-x64

1

clrgc.dll

windows7-x64

1

clrgc.dll

windows10-2004-x64

1

clrjit.dll

windows7-x64

1

clrjit.dll

windows10-2004-x64

1

coreclr.dll

windows7-x64

1

coreclr.dll

windows10-2004-x64

1

createdump.exe

windows7-x64

1

createdump.exe

windows10-2004-x64

1

Resubmissions

29/07/2024, 02:56

240729-de79natflc 10

28/07/2024, 16:23

240728-tv917awdlb 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Gatherum.exe

  • Size

    47.3MB

  • Sample

    240728-tv917awdlb

  • MD5

    3730b778d99878116f6b88afcbeef23f

  • SHA1

    8d9b2ad3f9ac19987e036bec2dfa672e3815b66b

  • SHA256

    d603137c0fa78fad4cf0f80498fddb7eb0e8f115a9d360e9ec88d21cbbeb6944

  • SHA512

    275d39e2e531b22cac4f68d5ae5e38e99d6263dc610de16987aa847e3a06b7c652e89b581a7815be935efd730a9255e3002a84226df4272ed3a4129f57c9d398

  • SSDEEP

    786432:4FfLgppR8t2argpex0I5z34qNBvf36IiQNIt7dOZ6xKpu3lbBVBZ1fNJ1zL7rDjh:4FfLgppR8t2KsefBIqNBvP6I2MQApu3b

Score
7/10

Malware Config

Targets

    • Target

      Gatherum.dll

    • Size

      397KB

    • MD5

      7f92f6fc00f1e4ccb88a51194e673613

    • SHA1

      0c7cc7304d744a726d23446a1082ca75a07b253e

    • SHA256

      5b48dc6af8b20952c007277cdf0b0237b548ec1292b026be538ac11d63c2e099

    • SHA512

      5cbd0f9913b167ab168d360ee887e373bbeba047f924a62966edb8be17742b9110dc385dbe2611d447b918239aa9c18668940c372175b482a16e23c1a5a37bcb

    • SSDEEP

      6144:f8XVDkw6Q6xotjidGynog53xGsufZ5un8XR+s:fudQdG2og50sufju8XAs

    Score
    1/10
    behavioral1behavioral2

    • Target

      Gatherum.exe

    • Size

      311KB

    • MD5

      532a26887429ef38958e00a547145e42

    • SHA1

      4790a4d80b07c2636c7ce6c16b2cb15354f40f5c

    • SHA256

      a2811033fc287f766b230ebe85d45224d1d2a8914fe2e5802dbaa4976586b504

    • SHA512

      6952d38bb43f87951f739a15cce39823bc97699597dc7a43944471edf8abe6887db12777fa64bc4975052addcdbc639ef56f53e4e2eafca9c7b02158ce561135

    • SSDEEP

      3072:KefQZKfOC31VwyY9egNtfNjJvjmqqF7Hb/LMm5MgDZffozCn8XR+ny6oz:KDewyY9egLRePYm5TKun8XR+s

    Score
    1/10
    behavioral3behavioral4

    • Target

      PenImc_cor3.dll

    • Size

      158KB

    • MD5

      362e037c4be1cb28fac25612e9be029d

    • SHA1

      4a11ab39dbd0dba5480f54324c58f8294b19ce5f

    • SHA256

      f95b51b5bee746ea3430a277f0473f42e4e22fc12b8dbfc719346cee579b80ff

    • SHA512

      945b6cc6cba7742323b6cc023eb78b227180bf8a0f8c134871948410b48d9399ae68f52ef80e18945fb018508f92ae6da9584c75c6f12fe06f6e86fdea4611d6

    • SSDEEP

      3072:OzAUq2kMBlUb8BQLBzDUw7aaHSuEmUgPuoATZ+AiRvYY4ZmoJ:OzHkMTvmLtDUw2huEmd2LbYvi

    Score
    1/10
    behavioral5behavioral6

    • Target

      PresentationCore.dll

    • Size

      8.1MB

    • MD5

      54a9ea4491aeee137812644020edf11c

    • SHA1

      0f37d038a55de37f21ac7766445db834a4c4be9d

    • SHA256

      0c4fe5ce21bfb23509f3193a32baa41418495d17566c8001a6089366f02c997f

    • SHA512

      4f0fe93075a1624d8ce943587f9e9279dbbd0ef555e16a5f959dc4cfc186a4efcf0606d9b787b0d051d589e16265130fce7e3af48188a77ae1751473e555b39b

    • SSDEEP

      98304:cydX7XPKirgh87l92RB9ZlssbECcj538M/YbaHvskr:cCj7H2T9Z+sACcj538M/5Hv1

    Score
    1/10
    behavioral7behavioral8

    • Target

      PresentationUI.dll

    • Size

      1.2MB

    • MD5

      a8c64156aae90700e637b4d37e4744f8

    • SHA1

      97c6aff2c92268f6dfe55a03e4c3867ef2506e23

    • SHA256

      ee9e588dd3a3902f2f864c8dd7cb5fcab7c9fe3513af2b16f3a04c0d32eb306c

    • SHA512

      fb1c22b8307d58fe261ffa7eb1573e0631e2d3ae8e5e92220ff66712548710435e175730623e8e2baf39010a28dd9d80b16d54b867928fdd94d37244d0b83143

    • SSDEEP

      12288:3HDpeJwwGlyTcnsQfoVGd3HyG+lfpaZxu7YJszbxho/tn7JAqkFU1j:3leFGlyXQfoVGd3HglxOiyothoVKjFUJ

    Score
    1/10
    behavioral10behavioral9

    • Target

      clretwrc.dll

    • Size

      303KB

    • MD5

      c12f1651e61edef832c290cdc3ccbdfb

    • SHA1

      a329fb8e9feacad28120a1c16dafb9469ceb4317

    • SHA256

      3221c558f2fe3ece84b0ca9cec27ab62d3518858d3afc49226ff79e7b7d42e0a

    • SHA512

      1e6863e95434f60d591899d2a981892030406057b62d2fc19bac5f2e954f987eabc65f87d164495d8f77f761bec9c9ff332c5ef2fd8385bf64215e96c4210609

    • SSDEEP

      3072:J99XK6chFa5y9sh33X+QIa7rGgtfqYZdzZ:Fq0FfqYZdt

    Score
    1/10
    behavioral11behavioral12

    • Target

      clrgc.dll

    • Size

      650KB

    • MD5

      107332498bbd353c98eaaede29cd0f02

    • SHA1

      81232df967bcb16c073ea69a7405ac7b67613f8a

    • SHA256

      dcd41cbd6dfa262bbd00ad3afaaf93ee5fc185c58a9dfb97ca1975aa367f9f2a

    • SHA512

      1c2d6ef3c0e63d376a95de2403fee395c22d8d783f2956a8cc164514a51d85f5a768f0977939a490d1358cafe268703c374cf789056b8094d68d6ae237f98150

    • SSDEEP

      6144:zASNUjAma1XYwwgbL+08M9Lm5e8oMKVz6m/iIF9iZkFFMFVge5HX8l/G/QqjgDud:0Smjba1XYwsMA5gMsPQkFgLZX8lyXjg8

    Score
    1/10
    behavioral13behavioral14

    • Target

      clrjit.dll

    • Size

      1.7MB

    • MD5

      8b81a3f0521b10e9de59507fe8efd685

    • SHA1

      0516ff331e09fbd88817d265ff9dd0b647f31acb

    • SHA256

      0759c8129bc761fe039e1cacb92c643606591cb8149a2ed33ee16babc9768dcb

    • SHA512

      ea11c04b92a76957dcebe9667bef1881fc9afa0f8c1547e23ada8125aa9e40d36e0efaf5749da346ba40c66da439cbd15bf98453e1f8dab4fe1efd5618fdc176

    • SSDEEP

      49152:1qIj/5IWQEyvBdl6oG452IhUz2IyUT/7Qnm9Ioj4zH:1nvQE4vF9hUz2Iy47am9Psb

    Score
    1/10
    behavioral15behavioral16

    • Target

      coreclr.dll

    • Size

      4.8MB

    • MD5

      9369162a572d150dca56c7ebcbb19285

    • SHA1

      81ce4faeecbd9ba219411a6e61d3510aa90d971d

    • SHA256

      871949a2ec19c183ccdacdea54c7b3e43c590eaf445e1b58817ee1cb3ce366d5

    • SHA512

      1eb5eb2d90e3dd38023a3ae461f717837ce50c2f9fc5e882b0593ab81dae1748bdbb7b9b0c832451dfe3c1529f5e1894a451365b8c872a8c0a185b521dbcd16b

    • SSDEEP

      98304:ck26vFhYIhiu8qgX43I1eZ8J8xgecGByojq:auBQqIsZ+8xg/GU

    Score
    1/10
    behavioral17behavioral18

    • Target

      createdump.exe

    • Size

      59KB

    • MD5

      da1aa2aa5fb66d00aa0b99c0c5dca64b

    • SHA1

      4f9f09c47c62a63863f0f93f41a92e008cd1f0c6

    • SHA256

      2c80484244598751462ce140768b970d8d5513ed919ee0b9257e48afdb73a6ea

    • SHA512

      531230c1997f65ffe317f161b9ded76de98795bb0261647f3b067c687e6eb2a881fb53d6098536e8e8995569cdd78939961aa666a2ef36676ee0fab088708974

    • SSDEEP

      768:ZrU+DEH1c0NCo4gq7qGO38wNh5EnXoS8YeHDh53ET44OAud79zR5:hhOcJgq+8u59FKJnCRzR5

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Matrix

Tasks