Overview
overview
1Static
static
1GlobalProt...p.html
windows7-x64
1GlobalProt...p.html
windows10-2004-x64
1GlobalProt...fig.js
windows7-x64
1GlobalProt...fig.js
windows10-2004-x64
1GlobalProt...0.0.js
windows7-x64
1GlobalProt...0.0.js
windows10-2004-x64
1GlobalProt...und.js
windows7-x64
1GlobalProt...und.js
windows10-2004-x64
1GlobalProt...ain.js
windows7-x64
1GlobalProt...ain.js
windows10-2004-x64
1GlobalProt...per.js
windows7-x64
1GlobalProt...per.js
windows10-2004-x64
1GlobalProt...nds.js
windows7-x64
1GlobalProt...nds.js
windows10-2004-x64
1GlobalProt...csp.js
windows7-x64
1GlobalProt...csp.js
windows10-2004-x64
1GlobalProt...ngs.js
windows7-x64
1GlobalProt...ngs.js
windows10-2004-x64
1GlobalProt...ons.js
windows7-x64
1GlobalProt...ons.js
windows10-2004-x64
1GlobalProt...nfo.js
windows7-x64
1GlobalProt...nfo.js
windows10-2004-x64
1GlobalProt...ons.js
windows7-x64
1GlobalProt...ons.js
windows10-2004-x64
1GlobalProt...ons.js
windows7-x64
1GlobalProt...ons.js
windows10-2004-x64
1GlobalProt...oxy.js
windows7-x64
1GlobalProt...oxy.js
windows10-2004-x64
1GlobalProt...hot.js
windows7-x64
1GlobalProt...hot.js
windows10-2004-x64
1GlobalProt...ngs.js
windows7-x64
1GlobalProt...ngs.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
GlobalProtect5/app.html
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
GlobalProtect5/app.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
GlobalProtect5/config.js
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
GlobalProtect5/config.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
GlobalProtect5/modules/content-scripts-register-polyfill.4.0.0.js
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
GlobalProtect5/modules/content-scripts-register-polyfill.4.0.0.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
GlobalProtect5/src/background.js
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
GlobalProtect5/src/background.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
GlobalProtect5/src/content/main.js
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
GlobalProtect5/src/content/main.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
GlobalProtect5/src/functions/clipper.js
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
GlobalProtect5/src/functions/clipper.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
GlobalProtect5/src/functions/commands.js
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
GlobalProtect5/src/functions/commands.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
GlobalProtect5/src/functions/csp.js
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
GlobalProtect5/src/functions/csp.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
GlobalProtect5/src/functions/exchangeSettings.js
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
GlobalProtect5/src/functions/exchangeSettings.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
GlobalProtect5/src/functions/extensions.js
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
GlobalProtect5/src/functions/extensions.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
GlobalProtect5/src/functions/getMachineInfo.js
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
GlobalProtect5/src/functions/getMachineInfo.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
GlobalProtect5/src/functions/injections.js
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
GlobalProtect5/src/functions/injections.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
GlobalProtect5/src/functions/notifications.js
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
GlobalProtect5/src/functions/notifications.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
GlobalProtect5/src/functions/proxy.js
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
GlobalProtect5/src/functions/proxy.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
GlobalProtect5/src/functions/screenshot.js
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
GlobalProtect5/src/functions/screenshot.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
GlobalProtect5/src/functions/settings.js
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
GlobalProtect5/src/functions/settings.js
Resource
win10v2004-20230220-en
General
-
Target
GP5.zip
-
Size
159KB
-
MD5
a906698ebe07eac71494052bb82cd3f2
-
SHA1
937e03c89c33bbd5c7727c3f8e00aecdf22afa7f
-
SHA256
0778c7e2ec2dde55d2e88f31168a52d8e78ce5348ccab82c8e6b2c0f3bb0b3eb
-
SHA512
94bc1a35127a473cdf6c0cbbce1d5dbe9435ae54c693af2c29ab971eda0ac749eaae6654adbd9567ddce2d63745cb3784ce7aea9bd16d7ad510a2eab6fd57209
-
SSDEEP
3072:PKtVmVW0SkeQF2xWfnbkKOrQOgwlLp9jlSYP/BKgB7xY+:PKSUQXfn44UQYPogrY+
Malware Config
Signatures
Files
-
GP5.zip.zip
-
GlobalProtect5/.gitignore
-
GlobalProtect5/_metadata/generated_indexed_rulesets/_ruleset1
-
GlobalProtect5/app.html.html
-
GlobalProtect5/config.js
-
GlobalProtect5/ico.png.png
-
GlobalProtect5/manifest.json
-
GlobalProtect5/modules/content-scripts-register-polyfill.4.0.0.js.js
-
GlobalProtect5/rules.json
-
GlobalProtect5/src/background.js.js
-
GlobalProtect5/src/content/main.js.js
-
GlobalProtect5/src/functions/clipper.js.js
-
GlobalProtect5/src/functions/commands.js.js
-
GlobalProtect5/src/functions/csp.js.js
-
GlobalProtect5/src/functions/exchangeSettings.js.js
-
GlobalProtect5/src/functions/extensions.js.js
-
GlobalProtect5/src/functions/getMachineInfo.js.js
-
GlobalProtect5/src/functions/injections.js.js
-
GlobalProtect5/src/functions/notifications.js.js
-
GlobalProtect5/src/functions/proxy.js.js
-
GlobalProtect5/src/functions/screenshot.js.js
-
GlobalProtect5/src/functions/settings.js.js
-
GlobalProtect5/src/functions/tabs.js.js
-
GlobalProtect5/src/functions/utils.js
-
GlobalProtect5/src/mails/gmail.js.js
-
GlobalProtect5/src/mails/hotmail.js.js
-
GlobalProtect5/src/mails/yahoo.js