Resubmissions

02-03-2023 09:20

230302-lax7wscc44 7

27-02-2023 12:30

230227-ppk3nadd8s 7

General

  • Target

    ChatGPT For Windows Setup 1.0.0.exe

  • Size

    165.9MB

  • Sample

    230227-ppk3nadd8s

  • MD5

    ab99ccd02b6681210cfccb6b381fdfda

  • SHA1

    e1f277ac2f304a6c0744fe0c151f471766728a54

  • SHA256

    0e5f0493fdaeb5cb2ed35e6bc92f14ea8bdb566dd1240e9481f6dcfeeb9bbf23

  • SHA512

    29b2e8faf4dd0f7d56e31d2c99aa1a696d5f82c9c408607c3a5275a32d6388ff44d9359d9283cb9f80085ff1173ecdde8746d5b8db92566f61d416532c4febff

  • SSDEEP

    3145728:xnd3Ke4rAjBuqvah8YhlSyIGGu40mGgNiqfslqLOUGgByv1EwOWAW6cmCfitnAT:xdae4kdaiY7SyVHvggWsl2OUHyNEwOWP

Malware Config

Targets

    • Target

      ChatGPT For Windows Setup 1.0.0.exe

    • Size

      165.9MB

    • MD5

      ab99ccd02b6681210cfccb6b381fdfda

    • SHA1

      e1f277ac2f304a6c0744fe0c151f471766728a54

    • SHA256

      0e5f0493fdaeb5cb2ed35e6bc92f14ea8bdb566dd1240e9481f6dcfeeb9bbf23

    • SHA512

      29b2e8faf4dd0f7d56e31d2c99aa1a696d5f82c9c408607c3a5275a32d6388ff44d9359d9283cb9f80085ff1173ecdde8746d5b8db92566f61d416532c4febff

    • SSDEEP

      3145728:xnd3Ke4rAjBuqvah8YhlSyIGGu40mGgNiqfslqLOUGgByv1EwOWAW6cmCfitnAT:xdae4kdaiY7SyVHvggWsl2OUHyNEwOWP

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks