Overview

overview

8

Static

static

8

ggw/1001�...��.url

windows7-x64

1

ggw/1001�...��.url

windows10-2004-x64

1

ggw/GGW.dll

windows7-x64

1

ggw/GGW.dll

windows10-2004-x64

1

ggw/ggwkeybord.exe

windows7-x64

1

ggw/ggwkeybord.exe

windows10-2004-x64

1

ggw/help.chm

windows7-x64

1

ggw/help.chm

windows10-2004-x64

1

ggw/helpc.chm

windows7-x64

1

ggw/helpc.chm

windows10-2004-x64

1

ggw/helpe.chm

windows7-x64

1

ggw/helpe.chm

windows10-2004-x64

1

ggw/parche.exe

windows7-x64

8

ggw/parche.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9c73dcb0b02f64116e6e030226c6242cf055d8179460d2d6bcd37747996b4a6

  • Size

    1013KB

  • Sample

    221124-gcefcafc7x

  • MD5

    d6395a5894b413275b3d67d32338a482

  • SHA1

    06a623a7f0790eff7fe805d0d62cd98aa94f219c

  • SHA256

    c9c73dcb0b02f64116e6e030226c6242cf055d8179460d2d6bcd37747996b4a6

  • SHA512

    a49d4dfa682e5d9d6610a0690acb99e1280c54fa0d77fddb508412874fbbcd0c381508b8ee119f28205c4fcddd180e46ae0f068ef7f12e1fedb6162e99d98ce8

  • SSDEEP

    24576:9EG/BQoyTM4x0vQynCseBwOckj4kwfezEE+FIeXP:9EG5Nyrx0YygBfcewX

Score
8/10
aspackv2upx

Malware Config

Targets

    • Target

      ggw/1001下载乐园.url

    • Size

      194B

    • MD5

      34b8b1c2cb71513650cab8e89d35d38b

    • SHA1

      8780483b8a6e47bc80e94a33f2fd801cab078e57

    • SHA256

      4af83175edf5a30c203679097ee12cf109e3f8217e41898224735ce3046a4d73

    • SHA512

      0775cd01d8832dafd25de5f7be589175e130ffab928bce7872c59adf50b6b63d623fc1a7f7271b067cda7a3d88415f320b69455035afb2a7fc208548b450b70e

    Score
    1/10
    behavioral1behavioral2

    • Target

      ggw/GGW.dll

    • Size

      170KB

    • MD5

      7d04fd65fcd3ea522030a6371e8a89ec

    • SHA1

      0eb58e28e15aa541972175b19d678a0f6780bb42

    • SHA256

      368bb98bdeb03c8e162d3a5909b29bfa22770b1af12460bfc441a92022b4a0f6

    • SHA512

      db642970a235f8ff0c07de986bd8f5a34988a666a593c073d71be25776343b083ea887e7a0fccddcba8f7437ce0d972ceaf850422c1913cdbf0eaf691453a11d

    • SSDEEP

      3072:vLgVO5FyLaVVi9RHdGzZUbryJQUaatd2fKN1PxuSKTVJufeAaDMB9HKK:35Fy+ViTHPmfZIXLAB9q

    Score
    1/10
    behavioral3behavioral4

    • Target

      ggw/ggwkeybord.exe

    • Size

      484KB

    • MD5

      a38507a025fa39d3b1c940bde02ca607

    • SHA1

      d539e851b8d52f6dfb9fb4e1d8350522283ea676

    • SHA256

      38fdf37e6cbea17658c74a47fbb48878c1b3decd972e5b52e7cfa8e6f565c8cd

    • SHA512

      0c52f2ad06e9d7888f38115ec2794f81b55a5dad83f9df95f1566846e66c9639f202caef2edae52ddc85d408b2ebb5ca2d5d3db0f375720bce7b0068a8f3a9b9

    • SSDEEP

      12288:vvBusa9/9Q4AGrRLrhRSbAaoePKs0c/k:HW1QJGr7RSbAoPf/k

    Score
    1/10
    behavioral5behavioral6

    • Target

      ggw/help.chm

    • Size

      112KB

    • MD5

      9d47382ab4fa7a2a638699c5cb702ce2

    • SHA1

      bdccd0ee14df4694c2b9d2327474444fe1e2e9cf

    • SHA256

      25c757b107a65fa2f057d01ba9ea4a45868318dddf4ea4a7ccf19503d27e27d5

    • SHA512

      af577bf43675640fba0dcf7c61e6d5e963c1b2d62342ec1964a9d45a23bc3e955f5e929bbfac70db1e8d7e3503c3328cc0ee30a00e36885ecf42f04787505876

    • SSDEEP

      1536:AyrF/sg14Jc1MNXfMXpmFpm9gRllIhLsr8wGAJEkRli7z+MvIBBLADbpXhSVtUYl:lrcJUwPImDmulIhLsr8wbX8uehS0Yl

    Score
    1/10
    behavioral7behavioral8

    • Target

      ggw/helpc.chm

    • Size

      112KB

    • MD5

      9d47382ab4fa7a2a638699c5cb702ce2

    • SHA1

      bdccd0ee14df4694c2b9d2327474444fe1e2e9cf

    • SHA256

      25c757b107a65fa2f057d01ba9ea4a45868318dddf4ea4a7ccf19503d27e27d5

    • SHA512

      af577bf43675640fba0dcf7c61e6d5e963c1b2d62342ec1964a9d45a23bc3e955f5e929bbfac70db1e8d7e3503c3328cc0ee30a00e36885ecf42f04787505876

    • SSDEEP

      1536:AyrF/sg14Jc1MNXfMXpmFpm9gRllIhLsr8wGAJEkRli7z+MvIBBLADbpXhSVtUYl:lrcJUwPImDmulIhLsr8wbX8uehS0Yl

    Score
    1/10
    behavioral10behavioral9

    • Target

      ggw/helpe.chm

    • Size

      100KB

    • MD5

      f1b849a522b9afb13f4ac1ea673b043f

    • SHA1

      0d4cc08494ffff9d88e80897460e5cf8f1a6432c

    • SHA256

      09bd457d38ef34ea7431a8df2c71682d148600aada109e64a4732a64b2c266cb

    • SHA512

      bb3d6c3dae7e5576f22004739006869fe7f758fb616c786b9395334bae1b6895396ae5b99f19b9a498f2692628e6b2d5d0b0cb307670ec3cfd899ad28ddda72b

    • SSDEEP

      3072:WateXPamY4rqeOGurOWpdJoqILrkolUDv0:Wa8XCxfbGkTJoqIsYX

    Score
    1/10
    behavioral11behavioral12

    • Target

      ggw/parche.exe

    • Size

      82KB

    • MD5

      1fdf18227df73966e6ea35477ae6967b

    • SHA1

      8937fc7c0ed64b77f33d1526039938e24bc0bd22

    • SHA256

      b2d4949e8f0a311a2ff0a97dc44595020c4162cb621f63ce32ccbe5fd930d9bd

    • SHA512

      30a55620ff3d3d37da1d1932a7be907a5904f95074042c1a6877edf73b919a4940ee285757af282b7d9d95c5b0749438123b600a9fe317b33031d932ab522e22

    • SSDEEP

      1536:WiyGk/Ug5fyQNLIltIu1QSTaRW/OjAZUr/VztdFEErxx6y:BksgZyQzGpO4bW7htPEErxx6y

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14

MITRE ATT&CK Enterprise v6

Tasks