General
- Target GorillaTag.exe
- Size 635KB
- Sample260730-wvqcwsdd69
- SHA256 700799291a7ab9684ed715746f3334833f67ded52c6471365910d4716cd828f7
- MD5 a3506c7728f09e6b1fc9f9cecb22b5ad
- SHA1 0969c911216a733f2c6182475b91d90618701e1a
- SHA512 25456cab59d642dbba373bc88bab40670a16fec6780250ae9992c58af7ac60fe2d5e78a462c59b8910de61e39bd40498c6e71b2cfbeeb9e17cff428b41a71cb9
- SSDEEP 3072:oys7oYfSbbQTLWuiUg7VsS4jMJN0nVW9nWa29:o/7oYfSHQPWTUg4/nVW9nWa29
- TLSH T139D40655B29198EAD02146788E71C6389737FD682D31DB0B72E4BF9F3F722C29D16A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GorillaTag.exe
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
GorillaTag.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target GorillaTag.exe
- Size 635KB
- SHA256 700799291a7ab9684ed715746f3334833f67ded52c6471365910d4716cd828f7
- MD5 a3506c7728f09e6b1fc9f9cecb22b5ad
- SHA1 0969c911216a733f2c6182475b91d90618701e1a
- SHA512 25456cab59d642dbba373bc88bab40670a16fec6780250ae9992c58af7ac60fe2d5e78a462c59b8910de61e39bd40498c6e71b2cfbeeb9e17cff428b41a71cb9
- SSDEEP 3072:oys7oYfSbbQTLWuiUg7VsS4jMJN0nVW9nWa29:o/7oYfSHQPWTUg4/nVW9nWa29
- TLSH T139D40655B29198EAD02146788E71C6389737FD682D31DB0B72E4BF9F3F722C29D16A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory