General
- Target Setup Gullfoss v1.11.9.exe
- Size 394.9MB
- Sample260716-xtfbzafy8t
- SHA256 b4e97317640d2bf8c75998e3b99d00c6ce3345e58014e77ee3686864fe1f0b70
- MD5 7e72205b1c3bb139c668359f16c32e03
- SHA1 91617563e3d405632c0c7ca90538611a8043205c
- SHA512 e3f2e5b74d31dd832ab5e2708e7c07b9c2ba9c6aeaa8c5fee846735d98978d9f1d1d9b0e547f81d24042b67cba76e2008c6c6e404f6aa231a172e269fb05d9ac
- SSDEEP 3145728:ibXc1I5fbXc115bbXc175zg1M1hm+PbXc1Txh5NPPsAtbXc1txI3s53S1d/Lqhbr:qi6iPidgQh/iftpiUEiM
- TLSH T178191247F2294294D267C078C91B960BE731389D37F096EB23A146DA2F277E07A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Setup Gullfoss v1.11.9.exe
- Size 394.9MB
- SHA256 b4e97317640d2bf8c75998e3b99d00c6ce3345e58014e77ee3686864fe1f0b70
- MD5 7e72205b1c3bb139c668359f16c32e03
- SHA1 91617563e3d405632c0c7ca90538611a8043205c
- SHA512 e3f2e5b74d31dd832ab5e2708e7c07b9c2ba9c6aeaa8c5fee846735d98978d9f1d1d9b0e547f81d24042b67cba76e2008c6c6e404f6aa231a172e269fb05d9ac
- SSDEEP 3145728:ibXc1I5fbXc115bbXc175zg1M1hm+PbXc1Txh5NPPsAtbXc1txI3s53S1d/Lqhbr:qi6iPidgQh/iftpiUEiM
- TLSH T178191247F2294294D267C078C91B960BE731389D37F096EB23A146DA2F277E07A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.