General
- Target gtw20.exe
- Size 1.6MB
- Sample260815-gzh22sec57
- SHA256 f173af0690a7f27844cde42844b810b86a8e9f12d9f45efb0b935b0f8eb776f8
- MD5 9dee55017ad2d455a48517095cd9adeb
- SHA1 8f012af87af49cdefcff33514a075f5487bdf841
- SHA512 196c096cd54d363402ea78991c3d57a7751c1e8c4ee9333c34c8865c4c2dcb80a909ebbf9b14d677b860ea5e929603d9f510e9df22f6a737475dec5ac50a21be
- SSDEEP 49152:v2V4eN1NrFY0fa+Rza8b57WcJnHBGC9aV:uVzNpY0RzaI5CCnHBGCu
- TLSH T1BF7533320298D47DD8A08B745517E066BC07BB047D71B57CA0CCDA4DBBBAAD90A0FBE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
gtw20.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target gtw20.exe
- Size 1.6MB
- SHA256 f173af0690a7f27844cde42844b810b86a8e9f12d9f45efb0b935b0f8eb776f8
- MD5 9dee55017ad2d455a48517095cd9adeb
- SHA1 8f012af87af49cdefcff33514a075f5487bdf841
- SHA512 196c096cd54d363402ea78991c3d57a7751c1e8c4ee9333c34c8865c4c2dcb80a909ebbf9b14d677b860ea5e929603d9f510e9df22f6a737475dec5ac50a21be
- SSDEEP 49152:v2V4eN1NrFY0fa+Rza8b57WcJnHBGC9aV:uVzNpY0RzaI5CCnHBGCu
- TLSH T1BF7533320298D47DD8A08B745517E066BC07BB047D71B57CA0CCDA4DBBBAAD90A0FBE5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.