General
- Target gmaker.exe
- Size 3.4MB
- Sample260802-ama3cazhnd
- SHA256 37994775f0212a1c6d4ffae7d60b4312ab6628ed4f57fa828428ba58a159fd95
- MD5 e5ff58dd32e673e5876ec0cbc3e14638
- SHA1 2314d5dbc62ae7304fc6f70d594d3194bb27d835
- SHA512 10f05bea9c7b01d7f02c2eb6b52f3ecc1d0e72a0589358923aaca89879cb70bac8ffa4d436dc34893256986e2b0f5df723eaa682301bec6714b79b088b24e4fb
- SSDEEP 98304:hFKFz2SYK8nFtL3uQyb0rWEWQeSo/iW/CwnPnvfj:bKpDkL3Hy9QeSo/iW6w/j
- TLSH T14FF5331BD7C02E36E41314B48E1F9FDE65A7F964EA70C68C592C59AC0A6C7AB243C4D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gmaker.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
gmaker.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target gmaker.exe
- Size 3.4MB
- SHA256 37994775f0212a1c6d4ffae7d60b4312ab6628ed4f57fa828428ba58a159fd95
- MD5 e5ff58dd32e673e5876ec0cbc3e14638
- SHA1 2314d5dbc62ae7304fc6f70d594d3194bb27d835
- SHA512 10f05bea9c7b01d7f02c2eb6b52f3ecc1d0e72a0589358923aaca89879cb70bac8ffa4d436dc34893256986e2b0f5df723eaa682301bec6714b79b088b24e4fb
- SSDEEP 98304:hFKFz2SYK8nFtL3uQyb0rWEWQeSo/iW/CwnPnvfj:bKpDkL3Hy9QeSo/iW6w/j
- TLSH T14FF5331BD7C02E36E41314B48E1F9FDE65A7F964EA70C68C592C59AC0A6C7AB243C4D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.