General
- Target GalacticToolsV3.exe
- Size 17.0MB
- Sample260628-rt67sshw8y
- SHA256 fb878cc5c79b9b3e396e13f71ac7bf22f5ece22a91e61ef099e1b7beafe73285
- MD5 b7e819fe0d2153f40b94985b3f4233bc
- SHA1 1b517e432a6893c6f6eed73fc2042f543ad90a46
- SHA512 a8742d865aaaeae54460c7c961b4d6e3c0f5ab4847f3c608be6e2ed4a04207e64c49826edf018bb782760b3d29dcf11fe64826ff1c5772a529827fdbd1f80094
- SSDEEP 393216:AnJGJBJydNBUUwDzCTsFfnpIwsDZ0uiDgpMJgLwCEhJkSIT:Q0JBJ1CopIwsDZO5C
- TLSH T16B0723DA2BB84FD2E23D03B5087537B8E73A62F53426C7597D9031D65A06F262982D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
GalacticToolsV3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
GalacticToolsV3.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target GalacticToolsV3.exe
- Size 17.0MB
- SHA256 fb878cc5c79b9b3e396e13f71ac7bf22f5ece22a91e61ef099e1b7beafe73285
- MD5 b7e819fe0d2153f40b94985b3f4233bc
- SHA1 1b517e432a6893c6f6eed73fc2042f543ad90a46
- SHA512 a8742d865aaaeae54460c7c961b4d6e3c0f5ab4847f3c608be6e2ed4a04207e64c49826edf018bb782760b3d29dcf11fe64826ff1c5772a529827fdbd1f80094
- SSDEEP 393216:AnJGJBJydNBUUwDzCTsFfnpIwsDZ0uiDgpMJgLwCEhJkSIT:Q0JBJ1CopIwsDZO5C
- TLSH T16B0723DA2BB84FD2E23D03B5087537B8E73A62F53426C7597D9031D65A06F262982D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE