General
- Target GekkoMoria.exe
- Size 120.4MB
- Sample260716-np3f9sfx2z
- SHA256 378023e9ed38579bc86513173e6c68ef86a431093cdf565bbc97bdfda639057b
- MD5 4b91e101c882d42863eebc37690f19ff
- SHA1 224f10d0777ee2432262d6cc80e1e84d2fc7b139
- SHA512 c62d2de58df2cac6ce955474e579e26825559cf6268420b9da569c9e9d13be4a1fdabbaab95c7ab808099d63a7c638714d945e4ca244bea52a0087836b752db6
- SSDEEP 786432:p86upqchZsUlpRqys503YrFHmZlOH09TTbdLDMTFTb+9X6KPu4DLaoPmW5:pwpvXXs50HZRvaT1q9X6KPuSpOW5
- TLSH T18F588D11A3E86E45E23B8278977386A1D675BC525311D2CF0094FD4A3F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GekkoMoria.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
GekkoMoria.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target GekkoMoria.exe
- Size 120.4MB
- SHA256 378023e9ed38579bc86513173e6c68ef86a431093cdf565bbc97bdfda639057b
- MD5 4b91e101c882d42863eebc37690f19ff
- SHA1 224f10d0777ee2432262d6cc80e1e84d2fc7b139
- SHA512 c62d2de58df2cac6ce955474e579e26825559cf6268420b9da569c9e9d13be4a1fdabbaab95c7ab808099d63a7c638714d945e4ca244bea52a0087836b752db6
- SSDEEP 786432:p86upqchZsUlpRqys503YrFHmZlOH09TTbdLDMTFTb+9X6KPu4DLaoPmW5:pwpvXXs50HZRvaT1q9X6KPuSpOW5
- TLSH T18F588D11A3E86E45E23B8278977386A1D675BC525311D2CF0094FD4A3F73BC2BA36366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.