General
- Target Gelonari.dll
- Size 319KB
- Sample260702-qmwl2scs8m
- SHA256 a61833673c20df4fdf93c39091fb162a14a21f629096e0e69e54ad97430a0d15
- MD5 011b230b55c6289054e28c639b135e3c
- SHA1 51a29da09f17b7c084b937b6a25d2be5fec1a427
- SHA512 b822809a897705017e907266fa70b1d63e88c61a8fbfa06e718a28816a61347f5b26b196f36c3814d98e6055e75ccd5461a0a973b4ee12ffa9c3fc33beac094f
- SSDEEP 6144:MJRVRKjUsdiF+VbzAUXpIgoN8egwJFF+vbwp38QvwsmceLBq:MJRrKjBdq+1SLSMFFgb63Rvwhcelq
- TLSH T146649E5737D84B20DB592AB6C0E7896403E2A5DB3B37D7493B454AD50C023B2FE4ABC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Gelonari.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gelonari.dll
Resource
win11ltsc2024-20260630-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Gelonari.dll
- Size 319KB
- SHA256 a61833673c20df4fdf93c39091fb162a14a21f629096e0e69e54ad97430a0d15
- MD5 011b230b55c6289054e28c639b135e3c
- SHA1 51a29da09f17b7c084b937b6a25d2be5fec1a427
- SHA512 b822809a897705017e907266fa70b1d63e88c61a8fbfa06e718a28816a61347f5b26b196f36c3814d98e6055e75ccd5461a0a973b4ee12ffa9c3fc33beac094f
- SSDEEP 6144:MJRVRKjUsdiF+VbzAUXpIgoN8egwJFF+vbwp38QvwsmceLBq:MJRrKjBdq+1SLSMFFgb63Rvwhcelq
- TLSH T146649E5737D84B20DB592AB6C0E7896403E2A5DB3B37D7493B454AD50C023B2FE4ABC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.