General
- Target gravetool.exe
- Size 35.0MB
- Sample260703-rxam1aaz9s
- SHA256 2717746c63e5c481fc4afc9aeb560479a720372eb77e1529f58a02c39aed6fe8
- MD5 4b930e8959db676fe9c16f55dbb2435e
- SHA1 658943470ea70d23b8a5d1a6b7df83f75b4ce4dd
- SHA512 47bdbe4f794bfe46cffae6a0ae668b5518a34b5c7a9b2882f2e9ce77869562f2b2c008e818861aa6aefde441d2df2af684e6b8022d6c58d73148dc9b61a50824
- SSDEEP 786432:waKAW8F2JtEhqKVR4DpEA8w1QtI5a8DZcECUHzvNIExfimrdtdV4JPRmRK:HKAW7PEhqKVuDps8iIk6iUTvNIEVjtdL
- TLSH T1AF87335433960158E0FF623562E98AE2B6F360920395D68F1BFD39207E531E9EE39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
gravetool.exe
Resource
win10v2004-20260513-ja
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
gravetool.exe
Resource
win11ltsc2024-20260629-ja
4 signatures
900 seconds
Malware Config
Targets
-
- Target gravetool.exe
- Size 35.0MB
- SHA256 2717746c63e5c481fc4afc9aeb560479a720372eb77e1529f58a02c39aed6fe8
- MD5 4b930e8959db676fe9c16f55dbb2435e
- SHA1 658943470ea70d23b8a5d1a6b7df83f75b4ce4dd
- SHA512 47bdbe4f794bfe46cffae6a0ae668b5518a34b5c7a9b2882f2e9ce77869562f2b2c008e818861aa6aefde441d2df2af684e6b8022d6c58d73148dc9b61a50824
- SSDEEP 786432:waKAW8F2JtEhqKVR4DpEA8w1QtI5a8DZcECUHzvNIExfimrdtdV4JPRmRK:HKAW7PEhqKVuDps8iIk6iUTvNIEVjtdL
- TLSH T1AF87335433960158E0FF623562E98AE2B6F360920395D68F1BFD39207E531E9EE39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Loads dropped DLL