General
- Target gtw27ru.exe
- Size 2.5MB
- Sample260821-gzfa6aaa73
- SHA256 70b975d4bc4c3f7d36b5ebdd41d6de39afb9d069ac320bcf96bcbe3732bc4082
- MD5 b34b209b32cb8949f763f26b83782685
- SHA1 bc29d35a79e184325e80e17c73f387812c1145a3
- SHA512 ec4e5c2e87b37b230b70a7ae8c4bf9a17069d4203fe7c3ff3237e114f21b5040084ac4d7a9d3fab850123fed48bddaa9f85500e5f1901f6a9b72100edd8a8e54
- SSDEEP 49152:Rh99UwhOF7lNYuCf6rOyb45V7mjlrrWHMNl9cv+xzBYd4zeZYqSSGd:RX93m1CTyb451mRWsNtad4zeZLDU
- TLSH T144C52303A7C30671F9510A3CCCA5D0583D4B7DA914D4A89A2DF9DA4F07BD78628BEE72
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
gtw27ru.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target gtw27ru.exe
- Size 2.5MB
- SHA256 70b975d4bc4c3f7d36b5ebdd41d6de39afb9d069ac320bcf96bcbe3732bc4082
- MD5 b34b209b32cb8949f763f26b83782685
- SHA1 bc29d35a79e184325e80e17c73f387812c1145a3
- SHA512 ec4e5c2e87b37b230b70a7ae8c4bf9a17069d4203fe7c3ff3237e114f21b5040084ac4d7a9d3fab850123fed48bddaa9f85500e5f1901f6a9b72100edd8a8e54
- SSDEEP 49152:Rh99UwhOF7lNYuCf6rOyb45V7mjlrrWHMNl9cv+xzBYd4zeZYqSSGd:RX93m1CTyb451mRWsNtad4zeZLDU
- TLSH T144C52303A7C30671F9510A3CCCA5D0583D4B7DA914D4A89A2DF9DA4F07BD78628BEE72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.