General
- Target MonkeModManager.zip
- Size 142KB
- Sample260502-w641esdx71
- SHA256 c2fc0ae48c62713af84f6ab9243f3c67ada5bf39dac2869a903266ba2003c985
- MD5 5545574ab0e738d06366fa6f29e6304a
- SHA1 bfeea32cb21738b2bb20f3c4f28b70709c6cc5cd
- SHA512 40c253562a3963a8af3109b3b61035dc72d62de19ce699ef8c9d353d0891b6a285ea338c36bd90ce05877c026cbc353dd4e8f316af1835af84d30fd90398c3ce
- SSDEEP 3072:hdJCp8/xeUk/xW1bU6tsXXwo8MD7EvZxQGOWGsRmtVx9lm:hlhMxYbU6mAoV7yZxQGOwRk3m
- TLSH T1C8E3120BD074FE60BBB3123BC81E0F956F2B72C62083987D886DBA5566F8F11CE16158
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Gorilla Tag.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gorilla Tag.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
MonkeModManager.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
MonkeModManager.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Gorilla Tag.exe
- Size 652KB
- SHA256 e40b4d8552ee26816f18360dfec0be5d258e622aba1f2485e4166caadaabfa8c
- MD5 430e43ab21d03582bea7c6e9cbb633a9
- SHA1 695f0baa20f1dcd32e1e8cdbc8b6541ded1bfb3f
- SHA512 754b67915eac9081442063c45cff76cbf90cf22c6d0721d47b4267c03c1c48dc21017adaa27d5dcd6b5984d5ae3940aca05dd4f072978c3399eea22d53eaab62
- SSDEEP 1536:An6FL0B23UTvCDPPpOSOPvuMXuUUhCKZPRcGkiRmzVHsWMdo9dl1HcUIc/bn2lds:BwazAjvuMeUwZPR5YzK4jHcUIcLBSnQ
- TLSH T170E440462016F48DD57405F9AFC5C2FC62207FA8395AA3F617E82E3B360634DC95BA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target MonkeModManager.exe
- Size 216KB
- SHA256 0d0779afd4e7cbc5491bb9ee028351ffafe13069394a7910be528dc4f7b6115b
- MD5 69282f1e91a0f0882baa8863edb41e40
- SHA1 1e57966cae304da3bed69d07ca892b139938302a
- SHA512 821c15dcf1101db2df3158fd80b939db59717f5d2dbc692fff172a553342cd33444d1e5d02e1d1944b369a847c4dcb225b69aba5a8e5801372a1341aa77dd0a7
- SSDEEP 3072:b3NgqdRPLHp/pmzFtNvjlxE090m5eBPwuXXxE090u:bKq7HlsFtpZxE099wlhE09
- TLSH T1E4245D1332988527D1674AB45B7781A0C3EDECC65920F6FB6C8F7ABA25BF670411063E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.