General
- Target gotcha.vir
- Size 12KB
- Sample260909-wp1axadc27
- SHA256 822ce21c572ac062ff55da8c94132f506af04ff919bf8f3bda848840076743b0
- MD5 b524ab61ce55d438992f5a712791f64a
- SHA1 a196a003432ed11ac69276b743b4293024a955fa
- SHA512 bb0a167027cd2367dd4101c76c75cb2f7e07690bd1ea0689beb9e96f36a85ac0d7674873c2004d63062eaf6790937869a33ac23735126a2c4a619873904ba707
- SSDEEP 192:cGB134wxhYL5fHW9WA5RcQlZhS6S9zK/f4SqJgFs5:cGB1oAcVHUW4RtlZOzK/wSqJD5
- TLSH T1ED42C746B500C13BC2556F350EABCBA8037A7C84DE4A111B3BB1734D2EB75D476AA3E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gotcha.msi
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
gotcha.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target gotcha.vir
- Size 12KB
- SHA256 822ce21c572ac062ff55da8c94132f506af04ff919bf8f3bda848840076743b0
- MD5 b524ab61ce55d438992f5a712791f64a
- SHA1 a196a003432ed11ac69276b743b4293024a955fa
- SHA512 bb0a167027cd2367dd4101c76c75cb2f7e07690bd1ea0689beb9e96f36a85ac0d7674873c2004d63062eaf6790937869a33ac23735126a2c4a619873904ba707
- SSDEEP 192:cGB134wxhYL5fHW9WA5RcQlZhS6S9zK/f4SqJgFs5:cGB1oAcVHUW4RtlZOzK/wSqJD5
- TLSH T1ED42C746B500C13BC2556F350EABCBA8037A7C84DE4A111B3BB1734D2EB75D476AA3E0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.