General
- Target gold.exe
- Size 8.7MB
- Sample260807-nemm3atepf
- SHA256 b8748eab08419ea953ccd567ea0e090342947ebf4746c9b93c39ce4790a84d1d
- MD5 7f8aa252e31505d5b944f0c3e208e378
- SHA1 1e5cd55048dcc51c8aae596bf0d57694762b0e9d
- SHA512 2a8648388babb177f6e8d5fec4162ebaa41ce9c91a14a0627c5fc676cd61a5388033af6cfd82090a9318a8cbca08347cb5b96dcc6d92e290453dd40944ec46b3
- SSDEEP 196608:onhcd3wehdUbaXEpXnH2ph1iut1/1QpL0uQg+R6tK7voKgpVFBZ:qhARhdpXEAphVtrQSg+RKK7vFgtB
- TLSH T11596335CB2E019FEF8F3853D9E95D411E6B2B9502B66C1EF07A049190E377E05E38AB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
gold.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
gold.pyc
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target gold.exe
- Size 8.7MB
- SHA256 b8748eab08419ea953ccd567ea0e090342947ebf4746c9b93c39ce4790a84d1d
- MD5 7f8aa252e31505d5b944f0c3e208e378
- SHA1 1e5cd55048dcc51c8aae596bf0d57694762b0e9d
- SHA512 2a8648388babb177f6e8d5fec4162ebaa41ce9c91a14a0627c5fc676cd61a5388033af6cfd82090a9318a8cbca08347cb5b96dcc6d92e290453dd40944ec46b3
- SSDEEP 196608:onhcd3wehdUbaXEpXnH2ph1iut1/1QpL0uQg+R6tK7voKgpVFBZ:qhARhdpXEAphVtrQSg+RKK7vFgtB
- TLSH T11596335CB2E019FEF8F3853D9E95D411E6B2B9502B66C1EF07A049190E377E05E38AB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target gold.pyc
- Size 6KB
- SHA256 0f9b2548248ed3eead96dac57ef852bc0d48de2a1980ee8e95767f5d9cb7ae8a
- MD5 e4637c6bc198f7c1e0b825fa1eef0251
- SHA1 b76fa4be3379f5dd3a9a2f4fecef1d5163690676
- SHA512 90fb163d8c6dcff5dd28610c512bd2fb4dac082fd48a9f3260fad699b9c2e9faac66e89072365784600db84600540a7b925b037c82bd6898897e7340657416b7
- SSDEEP 96:hC8hbfsh28mB0H4QgymV17uR2jpxdn1CwQvZdIdxlc1qi:XVszmB0bkj36pUdDc1qi
- TLSH T1F2D109E6D6C02813E9D8E8B820E39648A773C256A944E317A6304D7E5C9E7C5F67130D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10