General
- Target Gothsploit.exe
- Size 11.3MB
- Sample260802-gl2bgatxft
- SHA256 7a6e114de5f1548bc21effb774ee8ea18bb413c1f8da32e7a88a2a62a8f08ff3
- MD5 045b79d54844810dc2e6f2106fbffd77
- SHA1 6f49f9ffc9b81128c4486dccd46fec61cb69f879
- SHA512 eb0ed75f4fa8e592b3bf95c839b172ae932136fe0f8d4434e23f1373c77d82dab64dbafd444b8f135f6feb8a27b7821e628058de40e3dee8340445737d386db4
- SSDEEP 196608:NecD41+5U59TmNrQOqKnT8g9GlstMYEYG36DxlEsyofQmc0xw:Yc0O6FP0nTDA2tMYEYs6DwRofrc0i
- TLSH T126C6AE56E2FD00E8D4BBC0B8C6574617EBB234551330A7EB12A48A292F37BE56E7D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Gothsploit.exe
Resource
win10v2004-20260513-en
15 signatures
30 seconds
Behavioral task
behavioral2
Sample
Gothsploit.exe
Resource
win11ltsc2024-20260709-en
13 signatures
30 seconds
Malware Config
Targets
-
- Target Gothsploit.exe
- Size 11.3MB
- SHA256 7a6e114de5f1548bc21effb774ee8ea18bb413c1f8da32e7a88a2a62a8f08ff3
- MD5 045b79d54844810dc2e6f2106fbffd77
- SHA1 6f49f9ffc9b81128c4486dccd46fec61cb69f879
- SHA512 eb0ed75f4fa8e592b3bf95c839b172ae932136fe0f8d4434e23f1373c77d82dab64dbafd444b8f135f6feb8a27b7821e628058de40e3dee8340445737d386db4
- SSDEEP 196608:NecD41+5U59TmNrQOqKnT8g9GlstMYEYG36DxlEsyofQmc0xw:Yc0O6FP0nTDA2tMYEYs6DwRofrc0i
- TLSH T126C6AE56E2FD00E8D4BBC0B8C6574617EBB234551330A7EB12A48A292F37BE56E7D311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled