General
- Target Gateway-v1.0.1-win.zip
- Size 3.8MB
- Sample260710-az15ascw3y
- SHA256 06571761c8429a3f2b6bd3a35ebd9729eb1e1fd5015fa0ce26fe8ed37d04f9b1
- MD5 9e7ba4339b64595933a34e67ce87dbbf
- SHA1 a969dea0c3662512b9ffaf04ad8a8a2498d0602e
- SHA512 499c40d5449c08c80e5b9c1bc4c243278b7e0e57d13bb996f7786328da9b2678b587f363cc1fa55d939914a3b21f78ea25e54d31bb70ac77911c0c8e146f1c2f
- SSDEEP 98304:XjTWJwOk9XFjR0kXsTeadEqvYZoRk3M9p7D+nlUBsZMUIGxrBaJWdB:WRcXZR0kueW9p7qlUExjaJWdB
- TLSH T1891633F98A983894FE0258F0F558F870935D2138F67256172A8ED2C3B4C75672BCF998
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Gateway Installer.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Gateway Installer.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
NeuralAmpModeler manual.pdf
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Gateway Installer.exe
- Size 4.4MB
- SHA256 75903f17297bce6e32293e1fd85554bb44a45ed33a1c26812b5d96515fe8a5ee
- MD5 801ed019c5c961f1eb8902e06ab7da2f
- SHA1 da5ef0e80bd578f8a349099ac6d4ea5dd7a90d0a
- SHA512 03364022a7d77f9b1522b05e75a9fd6e98103fd3c5dcc0d1ec25625c2f324fafa557aae771432ba4aa258acd0449eddfc68e9e47af817c7c391acf7007327602
- SSDEEP 98304:R5OJrBrVvoepQh+aDYwofTheTkRuhZX/gL7kBO5WIw0XDR6Pkt0:LSBxvoem+EhZXI3kG9t6Pkt0
- TLSH T1A926023FF28B653EE02A1A367A72E110953B7A20A5124C1796ECF48CCF655711E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops desktop.ini file(s)
-
- Target NeuralAmpModeler manual.pdf
- Size 7KB
- SHA256 58af5e8b27a909d8a070b009dec1a5b20af35ea9aa59d78a10cddf589e48a031
- MD5 ee05ebbb3276ee5006a7cfecbe071345
- SHA1 e838c8404e370e62466e1096d51472e83d8888a6
- SHA512 d1d5f9cc13d518d7a28d892849e159888bebfa2914f63933cb92858441b5a3e185396804088501805ba2e8a0ce26cbd5f1c703ba40131ceec1142d17b6441111
- SSDEEP 192:V0KWSNApsCmr2QUxjXjTvujWame+kpDZlRL4qelOH:PviQUxjXjLujWwp9lfelOH
- TLSH T105F14CB5DCAD5C8DFD86C502963E346A477DB23372C528C24C2C0B46E062588EDA7AF7
- MD5 SHA1 SHA512 SSDEEP TLSH