Overview
overview
10Static
static
3ggpermV3/A...64.exe
windows10-1703-x64
1ggpermV3/A...64.exe
windows10-2004-x64
1ggpermV3/T...er.exe
windows10-1703-x64
ggpermV3/T...er.exe
windows10-2004-x64
8ggpermV3/ggpermV3.exe
windows10-1703-x64
10ggpermV3/ggpermV3.exe
windows10-2004-x64
1ggpermV3/s...er.exe
windows10-1703-x64
1ggpermV3/s...er.exe
windows10-2004-x64
1ggpermV3/woof.bat
windows10-1703-x64
8ggpermV3/woof.bat
windows10-2004-x64
8Analysis
-
max time kernel
4s -
max time network
9s -
platform
windows10-1703_x64 -
resource
win10-20231215-en -
resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system -
submitted
29-12-2023 01:03
Static task
static1
Behavioral task
behavioral1
Sample
ggpermV3/AMIDEWINx64.exe
Resource
win10-20231215-en
Behavioral task
behavioral2
Sample
ggpermV3/AMIDEWINx64.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
ggpermV3/Trinity Cleaner.exe
Resource
win10-20231215-en
Behavioral task
behavioral4
Sample
ggpermV3/Trinity Cleaner.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ggpermV3/ggpermV3.exe
Resource
win10-20231215-en
Behavioral task
behavioral6
Sample
ggpermV3/ggpermV3.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
ggpermV3/sxghr-driver.exe
Resource
win10-20231215-en
Behavioral task
behavioral8
Sample
ggpermV3/sxghr-driver.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ggpermV3/woof.bat
Resource
win10-20231215-en
Behavioral task
behavioral10
Sample
ggpermV3/woof.bat
Resource
win10v2004-20231215-en
General
-
Target
ggpermV3/AMIDEWINx64.exe
-
Size
453KB
-
MD5
6a6505b2413d2c7b16c6d059448db9e5
-
SHA1
dfe6c6b6051c26326a12dc9d0d5701cb4728266c
-
SHA256
53e3b72f8eb13acf3cb69d4cb124e8dc64fc541555c3c95cc8003b8046853955
-
SHA512
1c0531581f0efe683ab763f6633ace60f0637b22830e7ec551babe19ac777a1a6821dc568bce13a8abee8bfef1c7d9397e0bee1c78c00810c65dadd788dab2a3
-
SSDEEP
6144:JIeh4+TOKGuTSuXCJ6AtCoZPhGL/TnJ+z5rsxQhsCI9t/tk7MP:jpPTxXihA+zBhsC2Z
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 1 IoCs
Processes:
pid process 624