Overview
overview
3Static
static
1gale-v7.tar.gz
windows10-2004-x64
1gale-v7.tar.gz
windows11-21h2-x64
1gale-v7.tar
windows10-2004-x64
1gale-v7.tar
windows11-21h2-x64
1gale/Cargo.lock
windows10-2004-x64
3gale/Cargo.lock
windows11-21h2-x64
3gale/Cargo.toml
windows10-2004-x64
3gale/Cargo.toml
windows11-21h2-x64
3gale/build/hello.cgl
windows10-2004-x64
3gale/build/hello.cgl
windows11-21h2-x64
3gale/build/test.cgl
windows10-2004-x64
3gale/build/test.cgl
windows11-21h2-x64
3gale/build...rt.cgl
windows10-2004-x64
3gale/build...rt.cgl
windows11-21h2-x64
3gale/examp...le.gcf
windows10-2004-x64
3gale/examp...le.gcf
windows11-21h2-x64
3gale/examp...og.vbs
windows10-2004-x64
1gale/examp...og.vbs
windows11-21h2-x64
1gale/examp...pkg.js
windows10-2004-x64
3gale/examp...pkg.js
windows11-21h2-x64
3gale/examp...llo.js
windows10-2004-x64
3gale/examp...llo.js
windows11-21h2-x64
3gale/examples/ntfy.js
windows10-2004-x64
3gale/examples/ntfy.js
windows11-21h2-x64
3gale/examp...bot.js
windows10-2004-x64
3gale/examp...bot.js
windows11-21h2-x64
3gale/examples/test.gl
windows10-2004-x64
3gale/examples/test.gl
windows11-21h2-x64
3gale/examp...rgs.js
windows10-2004-x64
3gale/examp...rgs.js
windows11-21h2-x64
3gale/examp...ify.js
windows10-2004-x64
3gale/examp...ify.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
161s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/05/2026, 16:58
Static task
static1
Behavioral task
behavioral1
Sample
gale-v7.tar.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
gale-v7.tar.gz
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
gale-v7.tar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
gale-v7.tar
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
gale/Cargo.lock
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
gale/Cargo.lock
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
gale/Cargo.toml
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
gale/Cargo.toml
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
gale/build/hello.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
gale/build/hello.cgl
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
gale/build/test.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
gale/build/test.cgl
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
gale/build/test_import.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
gale/build/test_import.cgl
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
gale/examples/gale.gcf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
gale/examples/gale.gcf
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
gale/examples/goog.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
gale/examples/goog.vbs
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
gale/examples/greeter_pkg.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
gale/examples/greeter_pkg.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
gale/examples/hello.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
gale/examples/hello.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
gale/examples/ntfy.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
gale/examples/ntfy.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
gale/examples/robot.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
gale/examples/robot.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
gale/examples/test.gl
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
gale/examples/test.gl
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
gale/examples/test_args.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
gale/examples/test_args.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
gale/examples/test_clip_notify.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
gale/examples/test_clip_notify.js
Resource
win11-20260513-en
General
- Target gale/build/test.cgl
- Size 2KB
- Sample260523-vg83eaht4t
- SHA256 b2d2be9c77708f90e700a2ab86bf51bfc25ea4d7475077deb56f957b4774493f
- MD5 c45248516892f37b43f76f1ba723c1de
- SHA1 587072655dd6c135c05315016effdf16043ae3db
- SHA512 7d9772e571cfb6d7dd9e4ad85267094aa81dad0ecad5f62dfdb61cd2112f4e0bd896d6c828357dc12090c292d740c51e10550bb879d9c122dcd19cf87cf67c1e
- TLSH T10151BBE8C3C02B629BF14A7AA8D69870E179E131CD3736108259721E20C5E7F5ED1D24
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1768642833-2142038154-4041560723-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4928 OpenWith.exe