General
- Target GatewayEmulator.exe
- Size 420KB
- Sample260716-g2eseaev9r
- SHA256 9a986089cb661f97d3e233a2f938444a2756747e08d996cdbc7e5db98fae4486
- MD5 63cab5a49ba317469b2a22d134f93e1a
- SHA1 3aad89dd8d059354bfb8c3b428260540b8e18ed1
- SHA512 dc34eabbe5a2b945a8b72ca0eefc3a725638c12f203f1fbcca9b94757a594e01565a4041765bb9a72c34a09ce4c6e6b1e82e2af3e9154edc665fd820e464fd0a
- SSDEEP 6144:wLScfM5ME2mmtqTitkWBb3zOLr7JTr/bjEJuZv8hIOBiTpNJeXyXhl:oScfhlmmtTtBBDK9/PZ+IO8dxl
- TLSH T1AC947D25F65804FDE167D1B8C9634906EB72784A0370EECF03949AA61F236E49E3EF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GatewayEmulator.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
GatewayEmulator.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target GatewayEmulator.exe
- Size 420KB
- SHA256 9a986089cb661f97d3e233a2f938444a2756747e08d996cdbc7e5db98fae4486
- MD5 63cab5a49ba317469b2a22d134f93e1a
- SHA1 3aad89dd8d059354bfb8c3b428260540b8e18ed1
- SHA512 dc34eabbe5a2b945a8b72ca0eefc3a725638c12f203f1fbcca9b94757a594e01565a4041765bb9a72c34a09ce4c6e6b1e82e2af3e9154edc665fd820e464fd0a
- SSDEEP 6144:wLScfM5ME2mmtqTitkWBb3zOLr7JTr/bjEJuZv8hIOBiTpNJeXyXhl:oScfhlmmtTtBBDK9/PZ+IO8dxl
- TLSH T1AC947D25F65804FDE167D1B8C9634906EB72784A0370EECF03949AA61F236E49E3EF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1