Resubmissions

10-01-2025 03:28

250110-d1vwfszqbt 8

10-01-2025 03:26

250110-dzcy9aspfr 8

08-01-2025 04:07

250108-epr6vswjcl 8

08-01-2025 03:43

250108-d94vqaspcw 10

General

  • Target

    https://gemini-desktop.com/download/gemini.exe

  • Sample

    250110-d1vwfszqbt

Malware Config

Targets

    • Target

      https://gemini-desktop.com/download/gemini.exe

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks