General
- Target Gosth.exe
- Size 13.1MB
- Sample260913-styfbsyenb
- SHA256 03d8d8b76fcc2d18e3d4db247974257e4b3c939cec76235eee02410f6c30e7fc
- MD5 5c3ea987247d49d672db7c4e9bbfaae1
- SHA1 8e9072d6922ae38249c2567d209105a8402c2908
- SHA512 3f2de202c80257e54c9c48e0c845365b77303f1050bce9c2e36778a1acedea4279df8a7f1f825ae3116dcc90b2042387d2be8a02953ce82c9e7aa19f895b6b39
- SSDEEP 393216:GrAQFb2AsPyQtozj7d5Rg7bFdbqLrkf5B1YN9:GrpCAsPKfr+FdmLrg70
- TLSH T157D633F6C9308297CD57C5770F621A74349269AA268863D38B1B32A197143CEF8BD17F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Gosth.exe
Resource
win10v2004-20260911-en
12 signatures
120 seconds
Behavioral task
behavioral2
Sample
Gosth.exe
Resource
win10ltsc2021-20260911-en
14 signatures
120 seconds
Behavioral task
behavioral3
Sample
Gosth.exe
Resource
win11-20260911-en
12 signatures
120 seconds
Malware Config
Targets
-
- Target Gosth.exe
- Size 13.1MB
- SHA256 03d8d8b76fcc2d18e3d4db247974257e4b3c939cec76235eee02410f6c30e7fc
- MD5 5c3ea987247d49d672db7c4e9bbfaae1
- SHA1 8e9072d6922ae38249c2567d209105a8402c2908
- SHA512 3f2de202c80257e54c9c48e0c845365b77303f1050bce9c2e36778a1acedea4279df8a7f1f825ae3116dcc90b2042387d2be8a02953ce82c9e7aa19f895b6b39
- SSDEEP 393216:GrAQFb2AsPyQtozj7d5Rg7bFdbqLrkf5B1YN9:GrpCAsPKfr+FdmLrg70
- TLSH T157D633F6C9308297CD57C5770F621A74349269AA268863D38B1B32A197143CEF8BD17F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Executes dropped EXE
-
Loads dropped DLL