Overview
overview
3Static
static
1gale-v7.tar.gz
windows10-2004-x64
1gale-v7.tar.gz
windows11-21h2-x64
1gale-v7.tar
windows10-2004-x64
1gale-v7.tar
windows11-21h2-x64
1gale/Cargo.lock
windows10-2004-x64
3gale/Cargo.lock
windows11-21h2-x64
3gale/Cargo.toml
windows10-2004-x64
3gale/Cargo.toml
windows11-21h2-x64
3gale/build/hello.cgl
windows10-2004-x64
3gale/build/hello.cgl
windows11-21h2-x64
3gale/build/test.cgl
windows10-2004-x64
3gale/build/test.cgl
windows11-21h2-x64
3gale/build...rt.cgl
windows10-2004-x64
3gale/build...rt.cgl
windows11-21h2-x64
3gale/examp...le.gcf
windows10-2004-x64
3gale/examp...le.gcf
windows11-21h2-x64
3gale/examp...og.vbs
windows10-2004-x64
1gale/examp...og.vbs
windows11-21h2-x64
1gale/examp...pkg.js
windows10-2004-x64
3gale/examp...pkg.js
windows11-21h2-x64
3gale/examp...llo.js
windows10-2004-x64
3gale/examp...llo.js
windows11-21h2-x64
3gale/examples/ntfy.js
windows10-2004-x64
3gale/examples/ntfy.js
windows11-21h2-x64
3gale/examp...bot.js
windows10-2004-x64
3gale/examp...bot.js
windows11-21h2-x64
3gale/examples/test.gl
windows10-2004-x64
3gale/examples/test.gl
windows11-21h2-x64
3gale/examp...rgs.js
windows10-2004-x64
3gale/examp...rgs.js
windows11-21h2-x64
3gale/examp...ify.js
windows10-2004-x64
3gale/examp...ify.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
110s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/05/2026, 16:58
Static task
static1
Behavioral task
behavioral1
Sample
gale-v7.tar.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
gale-v7.tar.gz
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
gale-v7.tar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
gale-v7.tar
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
gale/Cargo.lock
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
gale/Cargo.lock
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
gale/Cargo.toml
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
gale/Cargo.toml
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
gale/build/hello.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
gale/build/hello.cgl
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
gale/build/test.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
gale/build/test.cgl
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
gale/build/test_import.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
gale/build/test_import.cgl
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
gale/examples/gale.gcf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
gale/examples/gale.gcf
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
gale/examples/goog.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
gale/examples/goog.vbs
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
gale/examples/greeter_pkg.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
gale/examples/greeter_pkg.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
gale/examples/hello.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
gale/examples/hello.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
gale/examples/ntfy.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
gale/examples/ntfy.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
gale/examples/robot.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
gale/examples/robot.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
gale/examples/test.gl
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
gale/examples/test.gl
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
gale/examples/test_args.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
gale/examples/test_args.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
gale/examples/test_clip_notify.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
gale/examples/test_clip_notify.js
Resource
win11-20260513-en
General
- Target gale/examples/gale.gcf
- Size 266B
- Sample260523-vg83eaht4t
- SHA256 4f7216414edf8a704c29bf6d47e22572e43665c1b103970dc695b41ae79a3b70
- MD5 1760a8b15f7cb068a92e81624b12ef6e
- SHA1 023ea5b74d0548d5252a36200ee3fc807277dbc2
- SHA512 6ea355e8119acb3302eb18c3fbc389de4082087315eed72e936f3046e77c7f123f5857f6320641488e75e97a80bea8fad4cb44b5615dee440ff56d92c924d704
- TLSH T132D02B7403054E72F0F41644EE174B96EA16D7E5D043A4214294D226E4893A19591534
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4036 OpenWith.exe