General
- Target Gateway-v1.0.1-win.zip
- Size 3.8MB
- Sample260710-bvhmtscz2y
- SHA256 06571761c8429a3f2b6bd3a35ebd9729eb1e1fd5015fa0ce26fe8ed37d04f9b1
- MD5 9e7ba4339b64595933a34e67ce87dbbf
- SHA1 a969dea0c3662512b9ffaf04ad8a8a2498d0602e
- SHA512 499c40d5449c08c80e5b9c1bc4c243278b7e0e57d13bb996f7786328da9b2678b587f363cc1fa55d939914a3b21f78ea25e54d31bb70ac77911c0c8e146f1c2f
- SSDEEP 98304:XjTWJwOk9XFjR0kXsTeadEqvYZoRk3M9p7D+nlUBsZMUIGxrBaJWdB:WRcXZR0kueW9p7qlUExjaJWdB
- TLSH T1891633F98A983894FE0258F0F558F870935D2138F67256172A8ED2C3B4C75672BCF998
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Gateway Installer.exe
- Size 4.4MB
- SHA256 75903f17297bce6e32293e1fd85554bb44a45ed33a1c26812b5d96515fe8a5ee
- MD5 801ed019c5c961f1eb8902e06ab7da2f
- SHA1 da5ef0e80bd578f8a349099ac6d4ea5dd7a90d0a
- SHA512 03364022a7d77f9b1522b05e75a9fd6e98103fd3c5dcc0d1ec25625c2f324fafa557aae771432ba4aa258acd0449eddfc68e9e47af817c7c391acf7007327602
- SSDEEP 98304:R5OJrBrVvoepQh+aDYwofTheTkRuhZX/gL7kBO5WIw0XDR6Pkt0:LSBxvoem+EhZXI3kG9t6Pkt0
- TLSH T1A926023FF28B653EE02A1A367A72E110953B7A20A5124C1796ECF48CCF655711E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.