General
- Target tmp_3gkxgex
- Size 102KB
- Sample260609-pzenmaav41
- SHA256 b1f70bd7d0c27a06e65aae69ae221a7f77d378177bf7c1faeccaf04e3bdc861f
- MD5 e7566bda4292061ffc04085a937aff74
- SHA1 a8e7bbdcbc6fc6a26aa9a8e6c62151adbef2b873
- SHA512 a08652164ed414c853fe0652074632c98c736dfe71b9f839b82a1e6ac16ac454a146de3da219419f7fb9900379701245c93678f32daf807e844050413e5d866f
- SSDEEP 1536:DYEcifXxm0bcruEhOd0FI/o30CQSRXH2pGQQsVxpMLeyOIbn83qpoM2fdeZd:5dXGPuw3dQK2pGmxOLe283q0f0
- TLSH T125A3F1527985C273C7140AB739BEDDCEDA807E65218C28EF93969D221ED6811AF50B83
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmp_3gkxgex.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp_3gkxgex.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
gootkit
Botnet
-
1001
C2
-
ridgezirak.com
-
larinsosia.com
Attributes
-
vendor_id
1001
Targets
-
- Target tmp_3gkxgex
- Size 102KB
- SHA256 b1f70bd7d0c27a06e65aae69ae221a7f77d378177bf7c1faeccaf04e3bdc861f
- MD5 e7566bda4292061ffc04085a937aff74
- SHA1 a8e7bbdcbc6fc6a26aa9a8e6c62151adbef2b873
- SHA512 a08652164ed414c853fe0652074632c98c736dfe71b9f839b82a1e6ac16ac454a146de3da219419f7fb9900379701245c93678f32daf807e844050413e5d866f
- SSDEEP 1536:DYEcifXxm0bcruEhOd0FI/o30CQSRXH2pGQQsVxpMLeyOIbn83qpoM2fdeZd:5dXGPuw3dQK2pGmxOLe283q0f0
- TLSH T125A3F1527985C273C7140AB739BEDDCEDA807E65218C28EF93969D221ED6811AF50B83
- MD5 SHA1 SHA512 SSDEEP TLSH