Overview

overview

10

Static

static

10

GDHM_TASBO...ll.bat

windows7-x64

1

GDHM_TASBO...ll.bat

windows10-2004-x64

1

GDHM_TASBO...32.dll

windows7-x64

1

GDHM_TASBO...32.dll

windows10-2004-x64

1

GDHM_TASBO...E2.dll

windows7-x64

1

GDHM_TASBO...E2.dll

windows10-2004-x64

1

GDHM_TASBO...ow.dll

windows7-x64

1

GDHM_TASBO...ow.dll

windows10-2004-x64

3

GDHM_TASBO...ow.dll

windows7-x64

1

GDHM_TASBO...ow.dll

windows10-2004-x64

1

GDHM_TASBO...lf.dll

windows7-x64

1

GDHM_TASBO...lf.dll

windows10-2004-x64

1

GDHM_TASBO...eg.exe

windows7-x64

1

GDHM_TASBO...eg.exe

windows10-2004-x64

1

GDHM_TASBO...v2.dll

windows7-x64

3

GDHM_TASBO...v2.dll

windows10-2004-x64

3

GDHM_TASBO...ef.dll

windows7-x64

1

GDHM_TASBO...ef.dll

windows10-2004-x64

1

GDHM_TASBO...et.ps1

windows7-x64

1

GDHM_TASBO...et.ps1

windows10-2004-x64

1

GDHM_TASBO...ko.ps1

windows7-x64

1

GDHM_TASBO...ko.ps1

windows10-2004-x64

1

GDHM_TASBO...ms.ps1

windows7-x64

1

GDHM_TASBO...ms.ps1

windows10-2004-x64

1

GDHM_TASBO...CN.ps1

windows7-x64

1

GDHM_TASBO...CN.ps1

windows10-2004-x64

1

GDHM_TASBO...32.dll

windows7-x64

1

GDHM_TASBO...32.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GDHM_TASBOT_v35.6.zip

  • Size

    137.1MB

  • Sample

    230315-tkrf4agd2w

  • MD5

    4866ee423214359074f7f3c3edfe8b2b

  • SHA1

    805eef116389bc05a657d9fef40ea26b5f3634c6

  • SHA256

    10273efcac023d59fc68901d4d4fcf3ca59858fbca92ffb81243ccd49784218d

  • SHA512

    8dbd65079e71b588968c6320798ecc8c37ea6b260c53e227d535d14aca6d2fccb5b811ed0e8ab7548988bea7a6be69399a2685dc52c68a4a0954e2515f2e5045

  • SSDEEP

    3145728:8sMWtceigrxhMJZHbCyItHFBsOBanwIzoOZUqAJjNVm:8sMWthHOYHkOgw7Oaqmi

Score
10/10
lummaupx

Malware Config

Targets

    • Target

      GDHM_TASBOT_v35.6/.GDHM/.GDHM_uninstall.bat

    • Size

      2KB

    • MD5

      2a6ed9dcdc9f8be9f0173124590b3335

    • SHA1

      5b55581b8328f4249785328e0ce8410d582f877a

    • SHA256

      e9bfaecdc031524c25d7a981b3922a493c863380e1b0b34c77c5826b8f10b849

    • SHA512

      b0c75206d2ff101d87f1106aabe7b4907304d56d01e8c16f2f4974a6fefda6f59a952563354c84b700af9f89093eb683c15af17afa6f0cb76775b514abe5a930

    Score
    1/10
    behavioral1behavioral2

    • Target

      GDHM_TASBOT_v35.6/.GDHM/tools/backup/msacm32.dll.bak

    • Size

      49KB

    • MD5

      b716117f2a7a40be7ee08581763d08a5

    • SHA1

      18807ae8c24fbefb08dbc2392c9a7a3219e95778

    • SHA256

      330018168f76437f51c21964c5c5f96193c655b586597ec599145c905389f88a

    • SHA512

      d5b4e6c745ae4075317c1288130dee6a39ef50ed7d57efa1592e31e573f9d56226ff8a43d6491249a9d272c6f25b17027a6f770347a7cb4c1f988d243d77f498

    • SSDEEP

      768:zLSYj3GicWa/sxEF6rQ030shvY0YQW8Wn9muQo0UzN2hiV9J1Ss:3Sm6sxI6rQ7shwqWn9mNo0UzPR1S

    Score
    1/10
    behavioral3behavioral4

    • Target

      GDHM_TASBOT_v35.6/.GDHM/tools/backup/pthreadVCE2.dll.bak

    • Size

      76KB

    • MD5

      ae4ae0ef65becf8684db223ceecbfba7

    • SHA1

      1826006ee9ca5090eacfdca63bcc370e2be701e6

    • SHA256

      27a8bd5814bf5e67858856f5090952e558c6e03fbebcbd66f7d8eb8fda2b369c

    • SHA512

      880b38c69a38c02923988ccafba630e8a5a12ec885d713fc863f69174b475e408427fb68acdf6a3415a3bbd6cb80a1eb81eb752b18ef03a4590cdb36c9f52e3e

    • SSDEEP

      768:o6J0QrqcRpxKyCqr/vb4ssGE9lICiH3Yays/:zJZxbf3stiH3Yays/

    Score
    1/10
    behavioral5behavioral6

    • Target

      GDHM_TASBOT_v35.6/RoastedMarshmellow.dll

    • Size

      131KB

    • MD5

      a16c532bc31d194b37f9d3279cca776b

    • SHA1

      33eceb271aedb99fb6fe04adca2511b2343c2433

    • SHA256

      8c36befca2a0ad82ffadc442bd6391bed8fcf855a398f3a8652332d087cf2afe

    • SHA512

      9454dacaae91fd81786c8608a4af04fe67058eb7590c99a4bf7386ca1e0c7621cfbd20333cce9ebeb6bb9e1fb0d9acc1726640a95e7b2c16b95821e1686606b3

    • SSDEEP

      3072:ArvdOcLB3FRvxIPHx/BNR//ct+NU5HMJXWHl4Y2pmnoQVHsMlBB:HyvkVFq61XSMQX

    Score
    3/10
    behavioral7behavioral8

    • Target

      GDHM_TASBOT_v35.6/ToastedMarshmellow.dll

    • Size

      19.8MB

    • MD5

      648ec09e3c4cf34bdcad8fd01819c334

    • SHA1

      1072d89df45a0e01163dacdbfb646bd677907a43

    • SHA256

      d08a952ef2a90adaee882607d4b77c4b4deae9d2d956d274f9c958b13d636311

    • SHA512

      16af9b8258ab0258d5d58e88ca0e214f278b518eef5e5164c235ba5957ccb32b7a385b2e6cec57e3fe61a216a524e5608ab4daa164c76c7207a8eaa9549296b2

    • SSDEEP

      393216:bJKxYmaj9Ei74yxJZq2F8qa2mgtG98GyuTk7Lg40pEPFVKEelx/6Dyg:UxRajzc6v62oTlCP2JlgDyg

    Score
    1/10
    behavioral10behavioral9

    • Target

      GDHM_TASBOT_v35.6/chrome_elf.dll

    • Size

      975KB

    • MD5

      4f179dd8c679540f60db142ff9ffa138

    • SHA1

      25c1d82d30f89c3e2eafdf77c5435f51854e1798

    • SHA256

      37261005b011733ac0a055980d22f0a31170e7d4af15fbe675c94f78dfb45b6c

    • SHA512

      50de56395fc68af9ef0d032a2f1cb5856987a2c82dadd56caa2eab0554b26cf6693abacdd0cc1e9546a662cd1614ce3826cc7a4dbfbce54a8a9157578b14870f

    • SSDEEP

      24576:rrq0hCg2lt/ILIrmdTsI6OoDsYfX9O0TbjqsozHpEBL8:1kt/IL2yisYlOgHolEB4

    Score
    1/10
    behavioral11behavioral12

    • Target

      GDHM_TASBOT_v35.6/ffmpeg/ffmpeg.exe

    • Size

      74.6MB

    • MD5

      5fcf17e1842e1e047394bb616605c7ac

    • SHA1

      c06874253f847d496c93d872d6855f53a6fb9631

    • SHA256

      4641851e1ed6e9966748b5dc30fb74b3f632405b595f3cd04af75db004833992

    • SHA512

      b3c8781008c793053f7bc1bb8506ec5919bdfaf6e3c75b68a491407e31442cf2724d290ae3353cb12aea15097faa02b2b1adfcec5aa3ef6c3f9cfa9b905c2409

    • SSDEEP

      1572864:HC6GAsJ034qVY+CBIOO0wdcYS/aEHBt6w5HnflkgwrkVRJsZRw+cJfagAoCFh75:Ddd

    Score
    1/10
    behavioral13behavioral14

    • Target

      GDHM_TASBOT_v35.6/libGLESv2.dll

    • Size

      5.4MB

    • MD5

      0247d1115b7c5bad5c42f752df2eecb5

    • SHA1

      517e175300e6b62ab0490ffbbeb09710455cefa1

    • SHA256

      db8e70356ddb6c9a6ca44e77cb71f61c41b022d3e6dc2c549128c9d7dae215a5

    • SHA512

      7a962755630af57d3f26c36095413159a034b123703679610cf274f6d061c19e17998db8d80a353e5b82495a40c67d8a94a8ac87ea8df02227815ea535001d69

    • SSDEEP

      98304:EqrK2BX3QtqV3vqUWGan8R5JNJM9UU3hbPHD/fhK1fd:rBX3d3W6rM9UU3hH

    Score
    3/10
    behavioral15behavioral16

    • Target

      GDHM_TASBOT_v35.6/libcef.dll

    • Size

      146.0MB

    • MD5

      3288c65d44d4b7834573735adb9d2e5e

    • SHA1

      0c199bd59c36748926a5add53180a3ccba42a2f5

    • SHA256

      17f2ad8fcfa5f8b10a4b794ab2d777a7e3985c871aebea246c3e9a68b86b2be0

    • SHA512

      1cab073bc1262028a96889a7a40e510245be5a84341586018edacb760bbd8229418799ae3a42c655e908842eefeea0366f8acf86e466decee05e21757545da2d

    • SSDEEP

      1572864:GaS2YewQZFn1iF7nUrv16MW8x79rnqZ8m8D2Az4uXIIjuOlG+/VzJIvZlEI7TDNt:QewOF1x91DJVyivE2T65CqD

    Score
    1/10
    behavioral17behavioral18

    • Target

      GDHM_TASBOT_v35.6/locales/et.pak

    • Size

      365KB

    • MD5

      f053123bc4a671fe578a157fb2492085

    • SHA1

      0a24eea3611a919b2631c8c028d4eef866e6835f

    • SHA256

      2e092178532ea4c65c2524c09eb6d2a2cc0aa1f4bb18fcbf3ffa696b9b3df785

    • SHA512

      7cac44bb9b27b692b6469ddcbcef5a262f2a4ae2f25b6eb4eb6044c613cf0fdd7bc1c32f3fc983dc8bd7c0c11325ae84a670d2fc737b9a54064e3fbfae21d60b

    • SSDEEP

      6144:Pb1bXAyruOH+yzZpDM04jRy2zmJbT/RcLviLVG59j643ueLfTPQD:DZFruNyrDwuXG59jM

    Score
    1/10
    behavioral19behavioral20

    • Target

      GDHM_TASBOT_v35.6/locales/ko.pak

    • Size

      411KB

    • MD5

      2df4adea8149d9ffc8566c49e26e3b78

    • SHA1

      481d0dd6d0c1e0667565b7d26cf37c986e1fe0f7

    • SHA256

      0e4af5f37a96ab590fe8e93f91d494dddcf9ea32dd79d97cb6d246f6e8227070

    • SHA512

      6d705512c21149c2750e68cc6444e5a89301f61f47e4171ae7e99f6e4e0c6de1956e810b94ef47ff5791e29e35885c7486371d07dff5fa00273378ba50afd05e

    • SSDEEP

      12288:3DlFeJgJKh0nZaCt8OhHJAXX25R7X98gtDq7hUo3Z5:TLZhJD5T8DZ5

    Score
    1/10
    behavioral21behavioral22

    • Target

      GDHM_TASBOT_v35.6/locales/ms.pak

    • Size

      375KB

    • MD5

      84f8b1a112d8628f8b52ee075271e633

    • SHA1

      d1b242a017f4c304f47cd8118fe48bba298cb2fa

    • SHA256

      8ac84c9580abca2354b99b257e4dfe69e7fd9ae2dda0f11f6dccf011ccbb16e9

    • SHA512

      4b0dfc73db68310217899153eeb464f0bf78bff44da0b5a8cf28eb9a8b25f67160a80a5289fe606342217003a01f6e4252351143314ba376bd2f2cb66b33450e

    • SSDEEP

      6144:e3GYNAR0GZUIuMxGDjsV5HloUjz/twN5DC4AMMqZ9:xY6RFxGq9logTtY5VTMG

    Score
    1/10
    behavioral23behavioral24

    • Target

      GDHM_TASBOT_v35.6/locales/zh-CN.pak

    • Size

      341KB

    • MD5

      d8fc4bf6f294e2021c7f9960a735005f

    • SHA1

      4899ead928c1da2a54762fbe787b7c9ead464ca3

    • SHA256

      74eca96015e86a13c294a3641d93f2d9f0da82b1a0abcb5835abdbd621f60346

    • SHA512

      d64c54c6f52f89728290b6f78f59f1c9f6668da6de0453fe09911b8df1250191b4a66bbba5d1ce49d014d63c149dc418e18e3a81704c6c727b7a09046aa7ff53

    • SSDEEP

      6144:OLyYYsz+7sRyQ74nqKgScnwrYEP5cN6RregBl4:OLy1sisRunqKBcnwxP5cN6Rr8

    Score
    1/10
    behavioral25behavioral26

    • Target

      GDHM_TASBOT_v35.6/msacm32.dll

    • Size

      58KB

    • MD5

      4370295bfda05ab9a876bbb7ad2d0cc7

    • SHA1

      1dd4f4b21d0675b360f19b9327b0941b4b7a4b6b

    • SHA256

      ca291bf5f24d4b70b5a19fabf8da880b36d783922baf6d3e5d651064ccb2e278

    • SHA512

      5736420e9a5db7ca7184845504d0e9ea07dcb36118534b5a6212ca0e5f6300069dca08461e45d93e33468d1aba38766d35819ccd3f3be6aeedfd3bb1fe5c0d0a

    • SSDEEP

      1536:hcdQTSbTdnNhjAbD/UjNyjTsokxyNrWn9mNoamFADO5KR7PJ:yMg5yjTso1C9mNoamFADO07PJ

    Score
    1/10
    behavioral27behavioral28

MITRE ATT&CK Matrix

Tasks