General

  • Target

    5e1e9a1434bcacebdefd00d7753aa281.bin

  • Size

    6.0MB

  • MD5

    498581dcb6338c705c8bf3d1203fd50f

  • SHA1

    b5f007f77fe36dff6ab451d439056a781d3fdccb

  • SHA256

    4f9a3a2d7d9d1d44c9e47e621965f0b1848663866b11a9fb4d8b19ca174e82c1

  • SHA512

    8d4ec1c047f4c33f04f3a1705b3f3d35e962c32eb28ba7e8022f71c125816091a996f6a01a30ae847d1af7725463d49066b57f54715721f9deed77cf40482d96

  • SSDEEP

    98304:ilnCg2HzaxkF0UWfNpoTzVPwMv5BJQ5q+6vWAe/EoL551+km2VUVb/oq4SEDy:iwBuqyZ4TzxwMviU+6jq1Lg7/0Dy

Score
1/10

Malware Config

Signatures

Files

  • 5e1e9a1434bcacebdefd00d7753aa281.bin
    .zip

    Password: infected

  • 1cf3d20b2f12307d80e1df1f76ea5280c7c85333450f3e6ef48bd0dc3fb42271.zip
    .zip

    Password: infected

  • GTA_hlMWYG/About/kr-KR/AVSValidationGP.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/AVSValidationGP.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/ActiveXInstallService.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/ActiveXInstallService.admx
  • GTA_hlMWYG/About/kr-KR/AddRemovePrograms.admx
  • GTA_hlMWYG/About/kr-KR/AllowBuildPreview.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/AllowBuildPreview.admx
  • GTA_hlMWYG/About/kr-KR/AppCompat.admx
  • GTA_hlMWYG/About/kr-KR/AppHVSI.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/AppXRuntime.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/AppxPackageManager.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/AttachmentManager.admx
  • GTA_hlMWYG/About/kr-KR/AuditSettings.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/AuditSettings.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/AutoPlay.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/AutoPlay.admx
  • GTA_hlMWYG/About/kr-KR/Biometrics.admx
  • GTA_hlMWYG/About/kr-KR/CEIPEnable.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/CEIPEnable.admx
  • GTA_hlMWYG/About/kr-KR/COM.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/COM.admx
  • GTA_hlMWYG/About/kr-KR/Camera.adml
  • GTA_hlMWYG/About/kr-KR/Camera.admx
  • GTA_hlMWYG/About/kr-KR/CipherSuiteOrder.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/CipherSuiteOrder.admx
  • GTA_hlMWYG/About/kr-KR/CloudContent.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/ControlPanel.admx
  • GTA_hlMWYG/About/kr-KR/Cpls.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Cpls.admx
  • GTA_hlMWYG/About/kr-KR/CredUI.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/CredUI.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/CredentialProviders.admx
  • GTA_hlMWYG/About/kr-KR/CtrlAltDel.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/CtrlAltDel.admx
  • GTA_hlMWYG/About/kr-KR/DCOM.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DCOM.admx
  • GTA_hlMWYG/About/kr-KR/DFS.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DFS.admx
  • GTA_hlMWYG/About/kr-KR/DWM.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DWM.admx
  • GTA_hlMWYG/About/kr-KR/DesktopAppInstaller.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/DeviceCompat.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DeviceCompat.admx
  • GTA_hlMWYG/About/kr-KR/DeviceCredential.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DeviceCredential.admx
  • GTA_hlMWYG/About/kr-KR/DeviceGuard.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/DeviceSetup.admx
  • GTA_hlMWYG/About/kr-KR/DigitalLocker.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DigitalLocker.admx
  • GTA_hlMWYG/About/kr-KR/DiskDiagnostic.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DiskDiagnostic.admx
  • GTA_hlMWYG/About/kr-KR/DiskNVCache.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DiskNVCache.admx
  • GTA_hlMWYG/About/kr-KR/DiskQuota.admx
  • GTA_hlMWYG/About/kr-KR/Display.admx
  • GTA_hlMWYG/About/kr-KR/DistributedLinkTracking.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DistributedLinkTracking.admx
  • GTA_hlMWYG/About/kr-KR/DmaGuard.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/DmaGuard.admx
  • GTA_hlMWYG/About/kr-KR/EAIME.admx
  • GTA_hlMWYG/About/kr-KR/EarlyLaunchAM.adml
  • GTA_hlMWYG/About/kr-KR/EarlyLaunchAM.admx
  • GTA_hlMWYG/About/kr-KR/EdgeUI.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/EdgeUI.admx
  • GTA_hlMWYG/About/kr-KR/EncryptFilesonMove.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/EncryptFilesonMove.admx
  • GTA_hlMWYG/About/kr-KR/EnhancedStorage.admx
  • GTA_hlMWYG/About/kr-KR/EventForwarding.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/EventForwarding.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/EventLogging.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/EventLogging.admx
  • GTA_hlMWYG/About/kr-KR/EventViewer.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/EventViewer.admx
  • GTA_hlMWYG/About/kr-KR/ExploitGuard.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/ExploitGuard.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/Explorer.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Explorer.admx
  • GTA_hlMWYG/About/kr-KR/ExternalBoot.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/ExternalBoot.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/FeedbackNotifications.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/FeedbackNotifications.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/FileHistory.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/FileHistory.admx
  • GTA_hlMWYG/About/kr-KR/FileRecovery.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/FileRecovery.admx
  • GTA_hlMWYG/About/kr-KR/FileRevocation.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/FileRevocation.admx
  • GTA_hlMWYG/About/kr-KR/FileServerVSSProvider.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/FileServerVSSProvider.admx
  • GTA_hlMWYG/About/kr-KR/FindMy.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/FindMy.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/FolderRedirection.admx
  • GTA_hlMWYG/About/kr-KR/FramePanes.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/FramePanes.admx
  • GTA_hlMWYG/About/kr-KR/GameDVR.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/GameDVR.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/Handwriting.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Handwriting.admx
  • GTA_hlMWYG/About/kr-KR/Help.admx
  • GTA_hlMWYG/About/kr-KR/HelpAndSupport.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/HelpAndSupport.admx
  • GTA_hlMWYG/About/kr-KR/IIS.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/IIS.admx
  • GTA_hlMWYG/About/kr-KR/LanmanServer.admx
  • GTA_hlMWYG/About/kr-KR/LanmanWorkstation.admx
  • GTA_hlMWYG/About/kr-KR/LeakDiagnostic.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/LeakDiagnostic.admx
  • GTA_hlMWYG/About/kr-KR/LinkLayerTopologyDiscovery.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/LinkLayerTopologyDiscovery.admx
  • GTA_hlMWYG/About/kr-KR/LocalSecurityAuthority.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/LocalSecurityAuthority.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/LocationProviderAdm.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/LocationProviderAdm.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/MDM.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/MDM.admx
  • GTA_hlMWYG/About/kr-KR/MMC.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/MMC.admx
  • GTA_hlMWYG/About/kr-KR/MSAPolicy.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/MSAPolicy.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/MSDT.admx
  • GTA_hlMWYG/About/kr-KR/Messaging.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/MobilePCMobilityCenter.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/MobilePCMobilityCenter.admx
  • GTA_hlMWYG/About/kr-KR/MobilePCPresentationSettings.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/MobilePCPresentationSettings.admx
  • GTA_hlMWYG/About/kr-KR/Msi-FileRecovery.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Msi-FileRecovery.admx
  • GTA_hlMWYG/About/kr-KR/Multitasking.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Multitasking.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/NCSI.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/NCSI.admx
  • GTA_hlMWYG/About/kr-KR/NetworkIsolation.admx
  • GTA_hlMWYG/About/kr-KR/NetworkProvider.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/NetworkProvider.admx
  • GTA_hlMWYG/About/kr-KR/NewsAndInterests.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/NewsAndInterests.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/OOBE.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/OOBE.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/OSPolicy.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/OSPolicy.admx
  • GTA_hlMWYG/About/kr-KR/P2P-pnrp.admx
  • GTA_hlMWYG/About/kr-KR/PeerToPeerCaching.admx
  • GTA_hlMWYG/About/kr-KR/PenTraining.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/PenTraining.admx
  • GTA_hlMWYG/About/kr-KR/PerformanceDiagnostics.admx
  • GTA_hlMWYG/About/kr-KR/PowerShellExecutionPolicy.admx
  • GTA_hlMWYG/About/kr-KR/PreviousVersions.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/PreviousVersions.admx
  • GTA_hlMWYG/About/kr-KR/Programs.admx
  • GTA_hlMWYG/About/kr-KR/PushToInstall.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/PushToInstall.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/RPC.admx
  • GTA_hlMWYG/About/kr-KR/RacWmiProv.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/RacWmiProv.admx
  • GTA_hlMWYG/About/kr-KR/Radar.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Radar.admx
  • GTA_hlMWYG/About/kr-KR/ReAgent.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/ReAgent.admx
  • GTA_hlMWYG/About/kr-KR/Reliability.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Reliability.admx
  • GTA_hlMWYG/About/kr-KR/RemoteAssistance.admx
  • GTA_hlMWYG/About/kr-KR/Scripts.admx
  • GTA_hlMWYG/About/kr-KR/SearchOCR.admx
  • GTA_hlMWYG/About/kr-KR/Securitycenter.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Securitycenter.admx
  • GTA_hlMWYG/About/kr-KR/Sensors.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Sensors.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/ServerManager.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/ServerManager.admx
  • GTA_hlMWYG/About/kr-KR/ServiceControlManager.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/ServiceControlManager.admx
  • GTA_hlMWYG/About/kr-KR/Servicing.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Servicing.admx
  • GTA_hlMWYG/About/kr-KR/Setup.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Setup.admx
  • GTA_hlMWYG/About/kr-KR/SharedFolders.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/SharedFolders.admx
  • GTA_hlMWYG/About/kr-KR/Sharing.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Sharing.admx
  • GTA_hlMWYG/About/kr-KR/Shell-CommandPrompt-RegEditTools.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Shell-CommandPrompt-RegEditTools.admx
  • GTA_hlMWYG/About/kr-KR/ShellWelcomeCenter.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/ShellWelcomeCenter.admx
  • GTA_hlMWYG/About/kr-KR/Sidebar.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Sidebar.admx
  • GTA_hlMWYG/About/kr-KR/SkyDrive.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/SkyDrive.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/SmartScreen.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/SmartScreen.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/Smartcard.admx
  • GTA_hlMWYG/About/kr-KR/Snmp.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Snmp.admx
  • GTA_hlMWYG/About/kr-KR/SoundRec.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/SoundRec.admx
  • GTA_hlMWYG/About/kr-KR/Speech.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Speech.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/StorageHealth.adml
  • GTA_hlMWYG/About/kr-KR/StorageHealth.admx
  • GTA_hlMWYG/About/kr-KR/StorageSense.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/SystemRestore.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/SystemRestore.admx
  • GTA_hlMWYG/About/kr-KR/TPM.admx
  • GTA_hlMWYG/About/kr-KR/TaskScheduler.admx
  • GTA_hlMWYG/About/kr-KR/TenantRestrictions.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/TenantRestrictions.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/TerminalServer-Server.adml
  • GTA_hlMWYG/About/kr-KR/TerminalServer-Server.admx
  • GTA_hlMWYG/About/kr-KR/TextInput.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/TextInput.admx
  • GTA_hlMWYG/About/kr-KR/Thumbnails.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Thumbnails.admx
  • GTA_hlMWYG/About/kr-KR/TouchInput.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/TouchInput.admx
  • GTA_hlMWYG/About/kr-KR/W32Time.admx
  • GTA_hlMWYG/About/kr-KR/WCM.admx
  • GTA_hlMWYG/About/kr-KR/WDI.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WDI.admx
  • GTA_hlMWYG/About/kr-KR/WPN.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/WebThreatDefense.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WebThreatDefense.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/WinCal.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WinCal.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/WinInit.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WinInit.admx
  • GTA_hlMWYG/About/kr-KR/WinLogon.admx
  • GTA_hlMWYG/About/kr-KR/WinMaps.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WinMaps.admx
  • GTA_hlMWYG/About/kr-KR/Winsrv.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/Winsrv.admx
  • GTA_hlMWYG/About/kr-KR/WirelessDisplay.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WirelessDisplay.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/WordWheel.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WordWheel.admx
  • GTA_hlMWYG/About/kr-KR/WorkFolders-Client.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WorkFolders-Client.admx
  • GTA_hlMWYG/About/kr-KR/WorkplaceJoin.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/WorkplaceJoin.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/fthsvc.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/fthsvc.admx
  • GTA_hlMWYG/About/kr-KR/hotspotauth.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/hotspotauth.admx
  • GTA_hlMWYG/About/kr-KR/iSCSI.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/iSCSI.admx
  • GTA_hlMWYG/About/kr-KR/kdc.admx
  • GTA_hlMWYG/About/kr-KR/messaging.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/msched.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/msched.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/nca.admx
  • GTA_hlMWYG/About/kr-KR/pca.admx
  • GTA_hlMWYG/About/kr-KR/sam.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/sam.admx
  • GTA_hlMWYG/About/kr-KR/sdiageng.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/sdiageng.admx
  • GTA_hlMWYG/About/kr-KR/sdiagschd.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/sdiagschd.admx
  • GTA_hlMWYG/About/kr-KR/srm-fci.admx
  • GTA_hlMWYG/About/kr-KR/wlansvc.adml
    .xml
  • GTA_hlMWYG/About/kr-KR/wlansvc.admx
    .xml
  • GTA_hlMWYG/About/kr-KR/wwansvc.admx
    .xml
  • GTA_hlMWYG/GTA_hlMWYG.exe
    .exe windows x86

    Password: infected


    Code Sign

    Headers

    Exports

    Sections

  • GTA_hlMWYG/READMY.txt
  • GTA_hlMWYG/packages/LicenseUniqueKey
  • GTA_hlMWYG/packages/Release.txt
  • GTA_hlMWYG/packages/gamemodes.txt
  • GTA_hlMWYG/zoxtxmot.ico