General
- Target gate.zip
- Size 11KB
- Sample260730-pnqlraxerh
- SHA256 2fa4f6a5dc71efb1d9f5c96069281624cdcabf70970da1aa947dfb4087deae38
- MD5 6ad94460d562c4a19cc4b09df407a8eb
- SHA1 e0c9e599d1e1d2ca24ae666e9b53a0d635a200fc
- SHA512 db7e84580e07550b62f93b8fda8d7f8b89bf9e8ad4211c30f9cf1a513d9022dc65d47cadfe1f0da3889d3c23c39971a117d0f1647af99e1ed86e8db1cdbfc480
- SSDEEP 192:kt2d16dEaCQ5KMTj2TAd1gPTUHEpC5TBMMbdgMENypvrgKI7nbIEZjVff1RuOTys:Q2/NaC0KMTj2TO1gbkEpuu8rgKI7nbIo
- TLSH T1F032BF83463C61B1C5EB6E301A0DB0C537B6E412D2FB05A1997BC2BCD6CA06765DC95C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gate.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
gate.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target gate.exe
- Size 12KB
- SHA256 de89028d76a406e46208ec2f67c7ecff3d9854e79ca60fdf6d86cdd5b190b818
- MD5 46bd3c903e37692aa40a76fb6ecc23ce
- SHA1 ecf541c65b6d79b431b12572597d3da43e76fc6a
- SHA512 2688850c34bf43f6eb1a46ec21b6e0d12a95f6d4158c69debe8b7f312724668b8376ac4654ae6e6abcc322af5eb7338329968cae5e8c8787ecceb2757ecbccb2
- SSDEEP 192:C0U0CV1aDbIOkKTYBeDCiHY6z2V/BBpXQkoCfjHudFGRR3pOogy0VYtxcKYI1jTj:40L0QYBeDCK6VFQCjumR5VcYvYGT8Bc
- TLSH T1E542BF32FD8C9693F2CD22B315A78D0D5DBD0141928D19B0FBD46C0F6A8BA8065BDDC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Deletes itself
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1