General
- Target Gateway-v1.0.1-win.zip
- Size 3.8MB
- Sample260709-3xtlnab15z
- SHA256 06571761c8429a3f2b6bd3a35ebd9729eb1e1fd5015fa0ce26fe8ed37d04f9b1
- MD5 9e7ba4339b64595933a34e67ce87dbbf
- SHA1 a969dea0c3662512b9ffaf04ad8a8a2498d0602e
- SHA512 499c40d5449c08c80e5b9c1bc4c243278b7e0e57d13bb996f7786328da9b2678b587f363cc1fa55d939914a3b21f78ea25e54d31bb70ac77911c0c8e146f1c2f
- SSDEEP 98304:XjTWJwOk9XFjR0kXsTeadEqvYZoRk3M9p7D+nlUBsZMUIGxrBaJWdB:WRcXZR0kueW9p7qlUExjaJWdB
- TLSH T1891633F98A983894FE0258F0F558F870935D2138F67256172A8ED2C3B4C75672BCF998
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Gateway Installer.exe
- Size 4.4MB
- SHA256 75903f17297bce6e32293e1fd85554bb44a45ed33a1c26812b5d96515fe8a5ee
- MD5 801ed019c5c961f1eb8902e06ab7da2f
- SHA1 da5ef0e80bd578f8a349099ac6d4ea5dd7a90d0a
- SHA512 03364022a7d77f9b1522b05e75a9fd6e98103fd3c5dcc0d1ec25625c2f324fafa557aae771432ba4aa258acd0449eddfc68e9e47af817c7c391acf7007327602
- SSDEEP 98304:R5OJrBrVvoepQh+aDYwofTheTkRuhZX/gL7kBO5WIw0XDR6Pkt0:LSBxvoem+EhZXI3kG9t6Pkt0
- TLSH T1A926023FF28B653EE02A1A367A72E110953B7A20A5124C1796ECF48CCF655711E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)