General
-
Target
ChatGPT4 V2.msi
-
Size
1.3MB
-
Sample
230713-g23jgafe73
-
MD5
0f77fb52cbe9489be260f739f4cbfce0
-
SHA1
28236b7b22ad00cfb14b7c04940a1dcb75262538
-
SHA256
5396c6c41584959beea2b5058c5e90d776d2908fbdfaeb08cda924c00b9bd9db
-
SHA512
d1debb3fb41df91b1e2173a6784b6be527713c2ca9228f0b22b07e2f4dbf95824652463d2ca767bd5f4d183667925aceabcbcaa5e048162fe60b7c2b33063b71
-
SSDEEP
24576:CHCSlEKSDB8pDESD30TidMgWZ5H1Wruyi4QX851wfM/3F:CHCZDB8pDESD30TimgS5VWha851wfM/1
Static task
static1
Behavioral task
behavioral1
Sample
ChatGPT4 V2.msi
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ChatGPT4 V2.msi
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
ChatGPT4 V2.msi
-
Size
1.3MB
-
MD5
0f77fb52cbe9489be260f739f4cbfce0
-
SHA1
28236b7b22ad00cfb14b7c04940a1dcb75262538
-
SHA256
5396c6c41584959beea2b5058c5e90d776d2908fbdfaeb08cda924c00b9bd9db
-
SHA512
d1debb3fb41df91b1e2173a6784b6be527713c2ca9228f0b22b07e2f4dbf95824652463d2ca767bd5f4d183667925aceabcbcaa5e048162fe60b7c2b33063b71
-
SSDEEP
24576:CHCSlEKSDB8pDESD30TidMgWZ5H1Wruyi4QX851wfM/3F:CHCZDB8pDESD30TimgS5VWha851wfM/1
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-