General
- Target GumbaCheck.exe
- Size 208KB
- Sample260728-vmv3qs1blf
- SHA256 47f609931dc901e74bdf8077938152055450104cf67da395ab5a7fc14145bfe7
- MD5 904e191df97693fd11f14ac3fb23ccaa
- SHA1 41a753145b5c7398b6ec322cdd2c76bb838fad23
- SHA512 d48798cc253b998647f0d19eca3ec2a5db9cf2a0395e0a1f4725c6761ec9fa77ede623c378a211debf82af93142a3c56a8e079ad03665db7d93cc4be2bf9be8b
- SSDEEP 3072:9eVIAdmwRFj5jEXx3VIUOCups/JSZQ6w0bMzKK4RisZhm1tBFFlNiaatDX2vCgRi:wdDTN+3OUOCups/oZxMzKVRisbm9iq
- TLSH T124248E4833FA4A29F2FFAF7468B502504A76BC56AD36D74D0985509E4E32F80CD61BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GumbaCheck.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GumbaCheck.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target GumbaCheck.exe
- Size 208KB
- SHA256 47f609931dc901e74bdf8077938152055450104cf67da395ab5a7fc14145bfe7
- MD5 904e191df97693fd11f14ac3fb23ccaa
- SHA1 41a753145b5c7398b6ec322cdd2c76bb838fad23
- SHA512 d48798cc253b998647f0d19eca3ec2a5db9cf2a0395e0a1f4725c6761ec9fa77ede623c378a211debf82af93142a3c56a8e079ad03665db7d93cc4be2bf9be8b
- SSDEEP 3072:9eVIAdmwRFj5jEXx3VIUOCups/JSZQ6w0bMzKK4RisZhm1tBFFlNiaatDX2vCgRi:wdDTN+3OUOCups/oZxMzKVRisbm9iq
- TLSH T124248E4833FA4A29F2FFAF7468B502504A76BC56AD36D74D0985509E4E32F80CD61BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.