Overview
overview
3Static
static
1gale-v7.tar.gz
windows10-2004-x64
1gale-v7.tar.gz
windows11-21h2-x64
1gale-v7.tar
windows10-2004-x64
1gale-v7.tar
windows11-21h2-x64
1gale/Cargo.lock
windows10-2004-x64
3gale/Cargo.lock
windows11-21h2-x64
3gale/Cargo.toml
windows10-2004-x64
3gale/Cargo.toml
windows11-21h2-x64
3gale/build/hello.cgl
windows10-2004-x64
3gale/build/hello.cgl
windows11-21h2-x64
3gale/build/test.cgl
windows10-2004-x64
3gale/build/test.cgl
windows11-21h2-x64
3gale/build...rt.cgl
windows10-2004-x64
3gale/build...rt.cgl
windows11-21h2-x64
3gale/examp...le.gcf
windows10-2004-x64
3gale/examp...le.gcf
windows11-21h2-x64
3gale/examp...og.vbs
windows10-2004-x64
1gale/examp...og.vbs
windows11-21h2-x64
1gale/examp...pkg.js
windows10-2004-x64
3gale/examp...pkg.js
windows11-21h2-x64
3gale/examp...llo.js
windows10-2004-x64
3gale/examp...llo.js
windows11-21h2-x64
3gale/examples/ntfy.js
windows10-2004-x64
3gale/examples/ntfy.js
windows11-21h2-x64
3gale/examp...bot.js
windows10-2004-x64
3gale/examp...bot.js
windows11-21h2-x64
3gale/examples/test.gl
windows10-2004-x64
3gale/examples/test.gl
windows11-21h2-x64
3gale/examp...rgs.js
windows10-2004-x64
3gale/examp...rgs.js
windows11-21h2-x64
3gale/examp...ify.js
windows10-2004-x64
3gale/examp...ify.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/05/2026, 16:58
Static task
static1
Behavioral task
behavioral1
Sample
gale-v7.tar.gz
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
gale-v7.tar.gz
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
gale-v7.tar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
gale-v7.tar
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
gale/Cargo.lock
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
gale/Cargo.lock
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
gale/Cargo.toml
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
gale/Cargo.toml
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
gale/build/hello.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
gale/build/hello.cgl
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
gale/build/test.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
gale/build/test.cgl
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
gale/build/test_import.cgl
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
gale/build/test_import.cgl
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
gale/examples/gale.gcf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
gale/examples/gale.gcf
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
gale/examples/goog.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
gale/examples/goog.vbs
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
gale/examples/greeter_pkg.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
gale/examples/greeter_pkg.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
gale/examples/hello.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
gale/examples/hello.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
gale/examples/ntfy.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
gale/examples/ntfy.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
gale/examples/robot.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
gale/examples/robot.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
gale/examples/test.gl
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
gale/examples/test.gl
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
gale/examples/test_args.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
gale/examples/test_args.js
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
gale/examples/test_clip_notify.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
gale/examples/test_clip_notify.js
Resource
win11-20260513-en
General
- Target gale-v7.tar
- Size 350KB
- Sample260523-vg83eaht4t
- SHA256 4dd7413d092cb2d2e31de2392acdb8541166fa14e533632746d7f7c907f3c1b4
- MD5 6befc915779750e8013592e2cb2360dc
- SHA1 4d2f5077e46d9bfdc6bcfd5449e2031eef447cd0
- SHA512 eed97ccf93017c5d98e2b29a70442d584de538b51ebd88497ee6c22f9e74d7fa1086a76d1cf3bdf9fed9678358880f20763ac77b028c3b6517ad158a1e682122
- SSDEEP 6144:u68b6TTwbX1ySmxkQWPuYhaIzoyuYUC1hPC:uT6TTwPoIzvPC
- TLSH T15E74E90A54F21630DAB3F03C46DBB0027A3AD05BA95CAE29BD7C5290AF5843D85F5FE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2856 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2856 7zFM.exe Token: 35 2856 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2856 7zFM.exe