General
- Target gbfr-logs-2.0.4.74-cleista-ALPHA-PRERELEASE-x64.msi
- Size 10.4MB
- Sample260810-wc2cfazsax
- SHA256 3a1343b236a605f8b5cedbadabfbdba7cd5cff15e09ffac07c3ca2fb7b7bf241
- MD5 b5cc6bc815e91d7f805fb4e332784357
- SHA1 0a71a36d6447c3058661bb4b64edffb468a28f14
- SHA512 4bc89551546e99abbd46039105c55d66fcfe6a3b1891d2bcdcc945a06779a667a0adcf1e3d80a951decdc1516b3ebf555902661c62cbc69c825c323a05c1f910
- SSDEEP 196608:M/qysxSwfyfmPmHY10lxB35ImVaoRrdR0QTRyjF9LfCxD9cmtmth2VkE:M/rskw9PmuST35Ik/ZFyR9LqxD9cbL2B
- TLSH T1E7B633137D924532E5BA1F3245B687A05A3DFC200B60C89B6348791DEEF11D1AB72BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gbfr-logs-2.0.4.74-cleista-ALPHA-PRERELEASE-x64.msi
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
gbfr-logs-2.0.4.74-cleista-ALPHA-PRERELEASE-x64.msi
Resource
win11ltsc2024-20260709-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target gbfr-logs-2.0.4.74-cleista-ALPHA-PRERELEASE-x64.msi
- Size 10.4MB
- SHA256 3a1343b236a605f8b5cedbadabfbdba7cd5cff15e09ffac07c3ca2fb7b7bf241
- MD5 b5cc6bc815e91d7f805fb4e332784357
- SHA1 0a71a36d6447c3058661bb4b64edffb468a28f14
- SHA512 4bc89551546e99abbd46039105c55d66fcfe6a3b1891d2bcdcc945a06779a667a0adcf1e3d80a951decdc1516b3ebf555902661c62cbc69c825c323a05c1f910
- SSDEEP 196608:M/qysxSwfyfmPmHY10lxB35ImVaoRrdR0QTRyjF9LfCxD9cmtmth2VkE:M/rskw9PmuST35Ik/ZFyR9LqxD9cbL2B
- TLSH T1E7B633137D924532E5BA1F3245B687A05A3DFC200B60C89B6348791DEEF11D1AB72BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.