Analysis

  • max time kernel
    54s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/03/2023, 08:28

General

  • Target

    GPUPI-CLI.exe

  • Size

    2.0MB

  • MD5

    3834ce561a6d3517cb34dfe565479fbc

  • SHA1

    475236531d414d28f1bab43e715e29dab9266ed7

  • SHA256

    9976676d670b88deaffff7cb1e63a7ba75e16c13c23ca1bd27af770a374b04b9

  • SHA512

    e6cc17525910fbc0e2c5ce63d2de1a1cc972269a5dded6d286ae7f839ef02933fcd76b87d451a43bcb3be99f1d800633bd39228717ac5ad3d04afb9bcfa7cc7b

  • SSDEEP

    24576:FnmIE9uHFWf0cBW1IcjAgLCYXCIT4lm4tvKD4LxJSR1hKN6AIHsKfi:xHFWnA1IcvCYSIIKDmJSR1heIHsj

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\GPUPI-CLI.exe
    "C:\Users\Admin\AppData\Local\Temp\GPUPI-CLI.exe"
    1⤵
    • Checks processor information in registry
    PID:2360

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2360-133-0x0000000074960000-0x0000000074CCF000-memory.dmp

          Filesize

          3.4MB