Overview
overview
10Static
static
10GDHM_TASBO...ll.bat
windows7-x64
1GDHM_TASBO...ll.bat
windows10-2004-x64
1GDHM_TASBO...32.dll
windows7-x64
1GDHM_TASBO...32.dll
windows10-2004-x64
1GDHM_TASBO...E2.dll
windows7-x64
1GDHM_TASBO...E2.dll
windows10-2004-x64
1GDHM_TASBO...ow.dll
windows7-x64
1GDHM_TASBO...ow.dll
windows10-2004-x64
3GDHM_TASBO...ow.dll
windows7-x64
1GDHM_TASBO...ow.dll
windows10-2004-x64
1GDHM_TASBO...lf.dll
windows7-x64
1GDHM_TASBO...lf.dll
windows10-2004-x64
1GDHM_TASBO...eg.exe
windows7-x64
1GDHM_TASBO...eg.exe
windows10-2004-x64
1GDHM_TASBO...v2.dll
windows7-x64
3GDHM_TASBO...v2.dll
windows10-2004-x64
3GDHM_TASBO...ef.dll
windows7-x64
1GDHM_TASBO...ef.dll
windows10-2004-x64
1GDHM_TASBO...et.ps1
windows7-x64
1GDHM_TASBO...et.ps1
windows10-2004-x64
1GDHM_TASBO...ko.ps1
windows7-x64
1GDHM_TASBO...ko.ps1
windows10-2004-x64
1GDHM_TASBO...ms.ps1
windows7-x64
1GDHM_TASBO...ms.ps1
windows10-2004-x64
1GDHM_TASBO...CN.ps1
windows7-x64
1GDHM_TASBO...CN.ps1
windows10-2004-x64
1GDHM_TASBO...32.dll
windows7-x64
1GDHM_TASBO...32.dll
windows10-2004-x64
1Analysis
-
max time kernel
15s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
15-03-2023 16:07
Behavioral task
behavioral1
Sample
GDHM_TASBOT_v35.6/.GDHM/.GDHM_uninstall.bat
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
GDHM_TASBOT_v35.6/.GDHM/.GDHM_uninstall.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
GDHM_TASBOT_v35.6/.GDHM/tools/backup/msacm32.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
GDHM_TASBOT_v35.6/.GDHM/tools/backup/msacm32.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
GDHM_TASBOT_v35.6/.GDHM/tools/backup/pthreadVCE2.dll
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
GDHM_TASBOT_v35.6/.GDHM/tools/backup/pthreadVCE2.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
GDHM_TASBOT_v35.6/RoastedMarshmellow.dll
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
GDHM_TASBOT_v35.6/RoastedMarshmellow.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
GDHM_TASBOT_v35.6/ToastedMarshmellow.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
GDHM_TASBOT_v35.6/ToastedMarshmellow.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
GDHM_TASBOT_v35.6/chrome_elf.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
GDHM_TASBOT_v35.6/chrome_elf.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
GDHM_TASBOT_v35.6/ffmpeg/ffmpeg.exe
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
GDHM_TASBOT_v35.6/ffmpeg/ffmpeg.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
GDHM_TASBOT_v35.6/libGLESv2.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
GDHM_TASBOT_v35.6/libGLESv2.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
GDHM_TASBOT_v35.6/libcef.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
GDHM_TASBOT_v35.6/libcef.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
GDHM_TASBOT_v35.6/locales/et.ps1
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
GDHM_TASBOT_v35.6/locales/et.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
GDHM_TASBOT_v35.6/locales/ko.ps1
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
GDHM_TASBOT_v35.6/locales/ko.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
GDHM_TASBOT_v35.6/locales/ms.ps1
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
GDHM_TASBOT_v35.6/locales/ms.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
GDHM_TASBOT_v35.6/locales/zh-CN.ps1
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
GDHM_TASBOT_v35.6/locales/zh-CN.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
GDHM_TASBOT_v35.6/msacm32.dll
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
GDHM_TASBOT_v35.6/msacm32.dll
Resource
win10v2004-20230220-en
General
-
Target
GDHM_TASBOT_v35.6/ffmpeg/ffmpeg.exe
-
Size
74.6MB
-
MD5
5fcf17e1842e1e047394bb616605c7ac
-
SHA1
c06874253f847d496c93d872d6855f53a6fb9631
-
SHA256
4641851e1ed6e9966748b5dc30fb74b3f632405b595f3cd04af75db004833992
-
SHA512
b3c8781008c793053f7bc1bb8506ec5919bdfaf6e3c75b68a491407e31442cf2724d290ae3353cb12aea15097faa02b2b1adfcec5aa3ef6c3f9cfa9b905c2409
-
SSDEEP
1572864:HC6GAsJ034qVY+CBIOO0wdcYS/aEHBt6w5HnflkgwrkVRJsZRw+cJfagAoCFh75:Ddd
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1380-54-0x000000013F8F0000-0x0000000144D28000-memory.dmpFilesize
84.2MB