General
- Target gatecmdsetup.zip
- Size 3.7MB
- Sample260620-pft9zags2s
- SHA256 0b86b762ca275b9a74a2694ff4a6f5d8d8d5338ffadc83cccdaba7ff3f71a52a
- MD5 0a81d2b39c5840798ddee774b210d9e1
- SHA1 b512f30c89264a8c464d3e26f78d900bda402c94
- SHA512 99a7e5588d90dfc652699570772ca9f64d1d41b90820a26710ca1d1a63c3a12949c21ec80b1271445d19ede3b5db3cf990ada5f8269dc5470fe4631ce61ec252
- SSDEEP 98304:FQJ2NIEzHonpCGXNCJZZ89z+55MOkm3v6B3oA7Y4JZ:FBSIHoo8ADZ8M55eY4JZ
- TLSH T1F60633B8689B773F716B5DB90796C94C3982C9B33F427681A7FC83278E23655F815A00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GateCmdSetup.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
GateCmdSetup.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target GateCmdSetup.exe
- Size 3.7MB
- SHA256 d4b243237936ac68bae2881530f5a8b9af41d603afb0830420f788e9cb0f3e63
- MD5 b3b92020bf5b525001c022a11ae059a4
- SHA1 4839e00d36e10c4405b4d0950d3f3829d2714df4
- SHA512 f942fa8358281dc0b13ff18e0b2f7afd822e2d41257085186b59b5f55353b5ff155f2ed28b1b706927fa8f2a9ad0e757c927ebbf087713652496049e8b4743ee
- SSDEEP 98304:QQw6GfnkmLdbXEBhNf58ZIOTfUIiSMWJCpOT3UiJOQT:QyCnkmFChF58xTfUIjOQT
- TLSH T163063358689B553BF00A4C7503E2C6457DA2D6A33B45E7C2F7F9D36A8E22281FD03E64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory