Resubmissions

28/12/2022, 23:54

221228-3x6k8afa6x 7

28/12/2022, 23:52

221228-3wtv2aca26 7

General

  • Target

    GDHM_TASBOT_v32.92.zip

  • Size

    13.7MB

  • MD5

    adb2867fd87cdefc68708c6f3f13053c

  • SHA1

    ddcc230cfe9d7e7d3bd4c8626c8e3433602e7504

  • SHA256

    e585599393fdf1910cf918cfead04fc5d9ffb3340112750aea4726291763e8a1

  • SHA512

    2be5e0a37c41e359e040cbf7a13bc39750cc9974d94ab03aa97503d626cf3cba224eba170bfb20ccb2b978fd3c2c7ac023d3a63d8b0aabd9db3aeb6318d74b91

  • SSDEEP

    393216:B0ogwRAa+eMvCMU09Ny1W/Loyf6HBG1v+0:So5Aa2N9yHV0

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • GDHM_TASBOT_v32.92.zip
    .zip
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_CappucinoSDK.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_Kazmath.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_StackWalker.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_bada_pthread.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_cocos2d-x.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_cocosdenshion.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_cpp-httplib.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_curl.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_detours.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_discord-rpc.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_gdh.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_gdrpc.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_imgui.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_jsoncpp.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_jsonhpp.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_kiero.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_libmem.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_minhook.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_openssl.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_spdlog.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_toml11.txt
  • GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_zlib.txt
  • GDHM_TASBOT_v32.92/.GDHM/mod/bypass.json
  • GDHM_TASBOT_v32.92/.GDHM/mod/core.json
  • GDHM_TASBOT_v32.92/.GDHM/mod/creator.json
  • GDHM_TASBOT_v32.92/.GDHM/mod/global.json
  • GDHM_TASBOT_v32.92/.GDHM/mod/player.json
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/gd_object.py
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/gd_object_dict.py
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/gd_pipe.py
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/main.py
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/pipe_name.config
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/requirements/install.bat
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/requirements/requirements.txt
  • GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/sample.json
  • GDHM_TASBOT_v32.92/.GDHM/tools/backup/GDHM_CLIENT.exe
    .exe windows x86

    06ddf77692562574239d617140687265


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v32.92/.GDHM/tools/backup/msacm32.dll.bak
    .dll windows x86

    5633319c28d2514cae6bf0126c1da38d


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v32.92/.GDHM/tools/backup/pthreadVCE2.dll.bak
    .dll windows x86

    3cb670276d26003b3e60cc547afc3c3e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v32.92/.GDHM_Geometrize2GD.bat
  • GDHM_TASBOT_v32.92/.GDHM_uninstall.bat
  • GDHM_TASBOT_v32.92/RoastedMarshmellow.dll
    .dll windows x86

    823440f5ee6148cb480f6f1197128ee1


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v32.92/ToastedMarshmellow.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • GDHM_TASBOT_v32.92/msacm32.dll
    .dll windows x86

    ff2254b955841b66716ba336e93a1b35


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v32.92/tBot.dll
    .dll windows x86


    Headers

    Exports

    Sections