Analysis
- geolocation tags
eueuropefrfrance - max time kernel
30s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/06/2026, 22:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Gosth Fivem.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
30 seconds
Behavioral task
behavioral2
Sample
Gosth Fivem.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
1 signatures
30 seconds
General
- Target Gosth Fivem.exe
- Size 2.7MB
- Sample260620-2fbh3sh13q
- SHA256 fb420382c5ddceb16bae851b1f2f8573996e759281b18fa96b6deb7a13b1d7a7
- MD5 c917536cef52f085407438682ad9e01b
- SHA1 ef8b20edef0c4f24ec14a59e1db987cf3405eadd
- SHA512 efa5340fbaedc01e83491c96d653e6bd87fbfc40e12e2d6346ca235bfc66c20fe63e9ed3b03a964a80d650d6e9f9c931f4fa9e6f0114dddc7c0c539ed9bd99d8
- SSDEEP 49152:fIMsfbuv3XxujXJBMNHT8+HE2a69AJRGFgpPdgapl+P:2bufxgXeFAJYmpl+P
- TLSH T17BD5C006A39641E8DA66C57CC54B9717E371780807308AEB6BD41F9A2F977E03A7F350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 24 IoCs
description pid Process Token: SeIncreaseQuotaPrivilege 5832 Gosth Fivem.exe Token: SeSecurityPrivilege 5832 Gosth Fivem.exe Token: SeTakeOwnershipPrivilege 5832 Gosth Fivem.exe Token: SeLoadDriverPrivilege 5832 Gosth Fivem.exe Token: SeSystemProfilePrivilege 5832 Gosth Fivem.exe Token: SeSystemtimePrivilege 5832 Gosth Fivem.exe Token: SeProfSingleProcessPrivilege 5832 Gosth Fivem.exe Token: SeIncBasePriorityPrivilege 5832 Gosth Fivem.exe Token: SeCreatePagefilePrivilege 5832 Gosth Fivem.exe Token: SeBackupPrivilege 5832 Gosth Fivem.exe Token: SeRestorePrivilege 5832 Gosth Fivem.exe Token: SeShutdownPrivilege 5832 Gosth Fivem.exe Token: SeDebugPrivilege 5832 Gosth Fivem.exe Token: SeSystemEnvironmentPrivilege 5832 Gosth Fivem.exe Token: SeChangeNotifyPrivilege 5832 Gosth Fivem.exe Token: SeRemoteShutdownPrivilege 5832 Gosth Fivem.exe Token: SeUndockPrivilege 5832 Gosth Fivem.exe Token: SeManageVolumePrivilege 5832 Gosth Fivem.exe Token: SeImpersonatePrivilege 5832 Gosth Fivem.exe Token: SeCreateGlobalPrivilege 5832 Gosth Fivem.exe Token: 33 5832 Gosth Fivem.exe Token: 34 5832 Gosth Fivem.exe Token: 35 5832 Gosth Fivem.exe Token: 36 5832 Gosth Fivem.exe