Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/07/2026, 06:12
General
- Target GunnyClient.exe
- Size 30.6MB
- Sample260710-gyadhset2p
- SHA256 6767735344cff685fb503f1ba15238c1b6a505b9681aa4199f0109cd7dc13e0a
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GunnyClient.exe"C:\Users\Admin\AppData\Local\Temp\GunnyClient.exe"1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
settings.sol
memory/5940-0-0x0000000074B62000-0x0000000074B63000-memory.dmp
memory/5940-1-0x00000000005B0000-0x0000000002444000-memory.dmp
memory/5940-2-0x0000000007690000-0x0000000007C4A000-memory.dmp
memory/5940-3-0x0000000006F80000-0x0000000007012000-memory.dmp
memory/5940-4-0x0000000004C00000-0x0000000004C16000-memory.dmp
memory/5940-5-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-6-0x00000000075F0000-0x00000000075FA000-memory.dmp
memory/5940-7-0x0000000008650000-0x00000000087C6000-memory.dmp
memory/5940-10-0x0000000008A40000-0x0000000008A56000-memory.dmp
memory/5940-9-0x0000000008A00000-0x0000000008A3E000-memory.dmp
memory/5940-8-0x00000000089D0000-0x0000000008A02000-memory.dmp
memory/5940-11-0x0000000008D20000-0x0000000008DBC000-memory.dmp
memory/5940-12-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-13-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-16-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-15-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-14-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-17-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-20-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-18-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-19-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-21-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-22-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-23-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-24-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-25-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-27-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-26-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-69-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-90-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-89-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-88-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-71-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-70-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-78-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-75-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-79-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-93-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-92-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-94-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-95-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-96-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-97-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-98-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-99-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-100-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-102-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-104-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-105-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-103-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-101-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-73-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-91-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-76-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-77-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-106-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-72-0x0000000011180000-0x0000000011D06000-memory.dmp
memory/5940-107-0x0000000074B62000-0x0000000074B63000-memory.dmp
memory/5940-111-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-110-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-113-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-114-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-116-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-118-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-121-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-120-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-117-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-115-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-112-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-109-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-108-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-137-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-129-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-130-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-139-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-143-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-150-0x000000000E1A0000-0x000000000E1CC000-memory.dmp
memory/5940-149-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-148-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-147-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-145-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-151-0x00000000070D0000-0x0000000007140000-memory.dmp
memory/5940-142-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-152-0x000000001DF20000-0x000000001DF66000-memory.dmp
memory/5940-141-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-140-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-138-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-135-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-134-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-132-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-131-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-133-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-128-0x000000001EE80000-0x000000001FA06000-memory.dmp
memory/5940-136-0x000000000DF30000-0x000000000DF31000-memory.dmp
memory/5940-153-0x0000000020D60000-0x0000000020DC6000-memory.dmp
memory/5940-154-0x0000000007630000-0x0000000007649000-memory.dmp
memory/5940-155-0x000000001E070000-0x000000001E122000-memory.dmp
memory/5940-156-0x000000000F1F0000-0x000000000F212000-memory.dmp
memory/5940-157-0x00000000215D0000-0x000000002192B000-memory.dmp
memory/5940-158-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-159-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-160-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-161-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-162-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-163-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-164-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-165-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-166-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-167-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-168-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-169-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-170-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-171-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-172-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-173-0x0000000074B50000-0x000000007530C000-memory.dmp
memory/5940-174-0x0000000074B50000-0x000000007530C000-memory.dmp