General
- Target gunsbot_v3.zip
- Size 42.2MB
- Sample260802-wrh5eavsgy
- SHA256 1373ff2a01d797ef1fb4dc0a523318b59cd1f69a8e20c888e48f04717914a332
- MD5 7aa70c109ef9ca502818d23929c6ac7e
- SHA1 0bda088feb5340eac4439ec30a2895ce4a46506f
- SHA512 071ca75dcd18d54878b5dd691065bc1b27801d0632e9fffe743a96fbdea6e653bfd1a015ec0f5a52486e4e143fcf5b28090f2689a354c196ea712bbe08e0b998
- SSDEEP 786432:TymhanpUZtfOobvSjTlUaL/hxt5YWfTYoN4XMJno7TBFTFWqczlCrzbLkxA:KnpctflbvY58aTpNTJuVzr3AxA
- TLSH T1B4A7330C61E26818F21391C687AF45BA9D8D8C30F6174A35D6BCB8523E9DE0B161EFDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gunsbot_v3.zip
Resource
win10v2004-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
gunsbot_v3.zip
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target gunsbot_v3.zip
- Size 42.2MB
- SHA256 1373ff2a01d797ef1fb4dc0a523318b59cd1f69a8e20c888e48f04717914a332
- MD5 7aa70c109ef9ca502818d23929c6ac7e
- SHA1 0bda088feb5340eac4439ec30a2895ce4a46506f
- SHA512 071ca75dcd18d54878b5dd691065bc1b27801d0632e9fffe743a96fbdea6e653bfd1a015ec0f5a52486e4e143fcf5b28090f2689a354c196ea712bbe08e0b998
- SSDEEP 786432:TymhanpUZtfOobvSjTlUaL/hxt5YWfTYoN4XMJno7TBFTFWqczlCrzbLkxA:KnpctflbvY58aTpNTJuVzr3AxA
- TLSH T1B4A7330C61E26818F21391C687AF45BA9D8D8C30F6174A35D6BCB8523E9DE0B161EFDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.