Resubmissions

13-07-2023 06:18

230713-g23jgafe73 8

24-06-2023 01:22

230624-bq8nfshe97 8

General

  • Target

    ChatGPT4 V2.msi

  • Size

    1.3MB

  • Sample

    230713-g23jgafe73

  • MD5

    0f77fb52cbe9489be260f739f4cbfce0

  • SHA1

    28236b7b22ad00cfb14b7c04940a1dcb75262538

  • SHA256

    5396c6c41584959beea2b5058c5e90d776d2908fbdfaeb08cda924c00b9bd9db

  • SHA512

    d1debb3fb41df91b1e2173a6784b6be527713c2ca9228f0b22b07e2f4dbf95824652463d2ca767bd5f4d183667925aceabcbcaa5e048162fe60b7c2b33063b71

  • SSDEEP

    24576:CHCSlEKSDB8pDESD30TidMgWZ5H1Wruyi4QX851wfM/3F:CHCZDB8pDESD30TimgS5VWha851wfM/1

Score
8/10

Malware Config

Targets

    • Target

      ChatGPT4 V2.msi

    • Size

      1.3MB

    • MD5

      0f77fb52cbe9489be260f739f4cbfce0

    • SHA1

      28236b7b22ad00cfb14b7c04940a1dcb75262538

    • SHA256

      5396c6c41584959beea2b5058c5e90d776d2908fbdfaeb08cda924c00b9bd9db

    • SHA512

      d1debb3fb41df91b1e2173a6784b6be527713c2ca9228f0b22b07e2f4dbf95824652463d2ca767bd5f4d183667925aceabcbcaa5e048162fe60b7c2b33063b71

    • SSDEEP

      24576:CHCSlEKSDB8pDESD30TidMgWZ5H1Wruyi4QX851wfM/3F:CHCZDB8pDESD30TimgS5VWha851wfM/1

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks