General
- Target gothgirls3.exe
- Size 18.1MB
- Sample260925-kv8npace97
- SHA256 c47a9ca2fce589911fb281bd7d94c53d2697581994031ddd6d62a01a354dcc92
- MD5 1b331848237ab89b94829952a78d23a0
- SHA1 004600b7d9089142784edd3bd90caf8e81cb3089
- SHA512 6394063463fd1ba1888becf527cf7cf776e0937c158e89810a4b9d211d61822154238e7f9398a07d40532a5693e423e2e692864a0f218d43fa990a5e05b6c2af
- SSDEEP 393216:JXpW8QL5NLn1+TtIiFlCuARuAr7Yx4rTWdS9QV8ax6i8+41b00JhCoCbYkfXCIoo:bW8Q9xn1QtI0CuA7m4usM8ax624ZDCBJ
- TLSH T172173399B79509EEE4DD123A83C1C22B67B334A24724E1CF1BE41D925E677E8DE35B00
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
gothgirls3.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
gothgirls3.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target gothgirls3.exe
- Size 18.1MB
- SHA256 c47a9ca2fce589911fb281bd7d94c53d2697581994031ddd6d62a01a354dcc92
- MD5 1b331848237ab89b94829952a78d23a0
- SHA1 004600b7d9089142784edd3bd90caf8e81cb3089
- SHA512 6394063463fd1ba1888becf527cf7cf776e0937c158e89810a4b9d211d61822154238e7f9398a07d40532a5693e423e2e692864a0f218d43fa990a5e05b6c2af
- SSDEEP 393216:JXpW8QL5NLn1+TtIiFlCuARuAr7Yx4rTWdS9QV8ax6i8+41b00JhCoCbYkfXCIoo:bW8Q9xn1QtI0CuA7m4usM8ax624ZDCBJ
- TLSH T172173399B79509EEE4DD123A83C1C22B67B334A24724E1CF1BE41D925E677E8DE35B00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.