General
- Target Gupooufte.exe
- Size 321KB
- Sample260705-xp4trse18w
- SHA256 67d03879ace8e3d1431097545d18e8ebc89b170d73f68e3088859c4fc68765b0
- MD5 dcc1630cc30d01420ac997be10ee542d
- SHA1 30ab18f328239e5e12ef51364b1bd623fb4cf2e7
- SHA512 72de1ac6e898676e293c99097647b99c4bb6d0f69bfec29a6f1c2b4c389b7de61e3a2229abf73d7afb2e2a600cc81e73471c8930e5d6d724847de247d95bbec4
- SSDEEP 6144:nFOxBwarTXCcHTGVMLxu+H6DGWESIt+z8WC3iH:nFBu3TCIyESY+z8WHH
- TLSH T1A1648C5817ED8A26E6FE62B5E83D040D47F6F61A612EFB4F1AA010FD6C13B8449017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Gupooufte.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gupooufte.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Gupooufte.exe
- Size 321KB
- SHA256 67d03879ace8e3d1431097545d18e8ebc89b170d73f68e3088859c4fc68765b0
- MD5 dcc1630cc30d01420ac997be10ee542d
- SHA1 30ab18f328239e5e12ef51364b1bd623fb4cf2e7
- SHA512 72de1ac6e898676e293c99097647b99c4bb6d0f69bfec29a6f1c2b4c389b7de61e3a2229abf73d7afb2e2a600cc81e73471c8930e5d6d724847de247d95bbec4
- SSDEEP 6144:nFOxBwarTXCcHTGVMLxu+H6DGWESIt+z8WC3iH:nFBu3TCIyESY+z8WHH
- TLSH T1A1648C5817ED8A26E6FE62B5E83D040D47F6F61A612EFB4F1AA010FD6C13B8449017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1