General
- Target gemini-code-1790366020925.txt
- Size 1KB
- Sample260925-ymgf5avhpf
- SHA256 c8508863854b90f7bfd4e7312f593ff54337df117f388e03677722b1237b7883
- MD5 ec419388fbd23b66d88d08bb193aedca
- SHA1 056589328ae0175e295f2c524bd1dff1e72935d7
- SHA512 5e7ffcaec9a5dd16d4457f59021a55d82381c4c7776e4cc546445c25aa085aa743d8a7dcce31f08572b26c99fbc93965333063d9bd3b6bea3ab385fa57c5acae
- TLSH T19E31CCAA79D19DD32D8BC07158BEB58172B555D30640CC327526BCFE52103F46BEF682
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
gemini-code-1790366020925.vbs
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
gemini-code-1790366020925.vbs
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target gemini-code-1790366020925.txt
- Size 1KB
- SHA256 c8508863854b90f7bfd4e7312f593ff54337df117f388e03677722b1237b7883
- MD5 ec419388fbd23b66d88d08bb193aedca
- SHA1 056589328ae0175e295f2c524bd1dff1e72935d7
- SHA512 5e7ffcaec9a5dd16d4457f59021a55d82381c4c7776e4cc546445c25aa085aa743d8a7dcce31f08572b26c99fbc93965333063d9bd3b6bea3ab385fa57c5acae
- TLSH T19E31CCAA79D19DD32D8BC07158BEB58172B555D30640CC327526BCFE52103F46BEF682
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.