General
- Target Launcher.zip
- Size 18.7MB
- Sample260710-gyadhset2p
- SHA256 dbd044ee17820bb2ff72459ae4d2d07321c0b3952760b912cab9a0ecec6f23ae
- MD5 b385e2edca8851c7c8f3361d0799e9a1
- SHA1 a7b447a41a32594ef298be9dd0d4f259e65390f0
- SHA512 02a06466b6aae96029b4c953d8e0340d3d6f2cec98036b2bfa8dbf84dbb174fcc735b4201c9d96287a9de9846fe2ca8ed42d721a158141e4c42328e90c92882f
- SSDEEP 393216:6U7p/LMldGo5Mm1KQaoBCuU6q75KHzYgYJdWnWoaOM0Ow:6+pLkK5oBCLlKTGtGM/w
- TLSH T1EB17337C32A3818BCBCB443CD22E7F01D1350A61BA3659DFC7319BF56F5E1999920A89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
GunnyClient.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
GunnyClient.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target GunnyClient.exe
- Size 30.6MB
- SHA256 6767735344cff685fb503f1ba15238c1b6a505b9681aa4199f0109cd7dc13e0a
- MD5 0f77b59c578ba599438e8b1315ea17e1
- SHA1 1dfe38b11752d34706dd42190d6e610e20459440
- SHA512 fa1636f193b976de08057dce3896c76355bb1c648e191bc5b719d2b969cd0a3e9a1d1158d0cbcb17c5297f9a5d4529e95ed1fc4ac11f29c6bbdb96315b436d67
- SSDEEP 786432:dDBHM8Tnu6bznCm3HNycCBfXR+9rgv9KLSMCcrLdB22yhb8:dDBso6m3VOErEYSMCcrLdBNyhA
- TLSH T1A467E062B681C3F1C14E29B17C27672E65B82E2D47207DC366DC385B657D3D28A3628F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.