General

  • Target

    GDHM_TASBOT_v36.9.zip

  • Size

    140.7MB

  • MD5

    b097c66da3bf0de88e55e2fee0db072e

  • SHA1

    fc6813f3749ba8427e2a7983c3cb8756dbea2c00

  • SHA256

    766f3176e358c3a2ea828383f075831c4d89dd2f6289ab9a417bcf7457d6a578

  • SHA512

    7fd7776ade600379c952736e94eb4105070cf09edb65d999d9cb4f1b827ace014ec958d2c2e1c845b3dc1807018fbb8dbab4bbfc90ff81d47e87496ed08379c9

  • SSDEEP

    3145728:vsMWtc+igLxhMJZHbCyItHFBsOBangrbw0ZbOVZKJ1f:vsMWtBvOYHkOggw0oV4

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • GDHM_TASBOT_v36.9.zip
    .zip

    Password: gfhfghgf

  • GDHM_TASBOT_v36.9/.GDHM/.GDHM_uninstall.bat
  • GDHM_TASBOT_v36.9/.GDHM/mod/bypass.json
  • GDHM_TASBOT_v36.9/.GDHM/mod/core.json
  • GDHM_TASBOT_v36.9/.GDHM/mod/creator.json
  • GDHM_TASBOT_v36.9/.GDHM/mod/global.json
  • GDHM_TASBOT_v36.9/.GDHM/mod/player.json
  • GDHM_TASBOT_v36.9/.GDHM/mod/variables.json
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_CappucinoSDK.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_Kazmath.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_NSWFL.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_ProxyDll.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_ReplayBot.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_StackWalker.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_bada_pthread.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_cocos2d-x.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_cocosdenshion.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_cpp-httplib.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_curl.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_detours.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_discord-rpc.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_gd.h_combined.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_gd.h_pie.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_gdrpc.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_imgui.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_jsoncpp.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_jsonhpp.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_kiero.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_libmem.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_libmem_new.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_minhook.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_openssl.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_pugixml.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_spdlog.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_toml11.txt
  • GDHM_TASBOT_v36.9/.GDHM/third_party_licenses/LICENSE_zlib.txt
  • GDHM_TASBOT_v36.9/.GDHM/tools/backup/msacm32.dll.bak
    .dll windows:6 windows x86 arch:x86

    Password: gfhfghgf

    5633319c28d2514cae6bf0126c1da38d


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.9/.GDHM/tools/backup/msacm32.dll.loader.bak
    .dll windows:6 windows x86 arch:x86

    Password: gfhfghgf

    ff2254b955841b66716ba336e93a1b35


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.9/.GDHM/tools/backup/pthreadVCE2.dll.bak
    .dll windows:4 windows x86 arch:x86

    Password: gfhfghgf

    3cb670276d26003b3e60cc547afc3c3e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.9/RoastedMarshmellow.dll
    .dll windows:6 windows x86 arch:x86

    Password: gfhfghgf


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • GDHM_TASBOT_v36.9/ToastedMarshmellow.dll
    .dll windows:6 windows x86 arch:x86

    Password: gfhfghgf


    Headers

    Exports

    Sections

  • GDHM_TASBOT_v36.9/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    Password: gfhfghgf

    46e95598c82058b66dbe1c6512294f70


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.9/ffmpeg/ffmpeg.exe
    .exe windows:4 windows x64 arch:x64

    Password: gfhfghgf

    7f79a986d1250a6769db80418985e98e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.9/icudtl.dat
  • GDHM_TASBOT_v36.9/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    Password: gfhfghgf

    d445fa16df485ec13a570c579e0fc7e5


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.9/libcef.dll
    .dll windows:5 windows x86 arch:x86

    5d187fae28656284846a7c1dc5fae256


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.9/locales/af.pak
  • GDHM_TASBOT_v36.9/locales/am.pak
  • GDHM_TASBOT_v36.9/locales/ar.pak
  • GDHM_TASBOT_v36.9/locales/bg.pak
  • GDHM_TASBOT_v36.9/locales/bn.pak
  • GDHM_TASBOT_v36.9/locales/ca.pak
  • GDHM_TASBOT_v36.9/locales/cs.pak
  • GDHM_TASBOT_v36.9/locales/da.pak
  • GDHM_TASBOT_v36.9/locales/de.pak
  • GDHM_TASBOT_v36.9/locales/el.pak
  • GDHM_TASBOT_v36.9/locales/en-GB.pak
  • GDHM_TASBOT_v36.9/locales/en-US.pak
  • GDHM_TASBOT_v36.9/locales/es-419.pak
  • GDHM_TASBOT_v36.9/locales/es.pak
  • GDHM_TASBOT_v36.9/locales/et.pak
    .ps1
  • GDHM_TASBOT_v36.9/locales/fa.pak
  • GDHM_TASBOT_v36.9/locales/fi.pak
  • GDHM_TASBOT_v36.9/locales/fil.pak
  • GDHM_TASBOT_v36.9/locales/fr.pak
  • GDHM_TASBOT_v36.9/locales/gu.pak
  • GDHM_TASBOT_v36.9/locales/he.pak
  • GDHM_TASBOT_v36.9/locales/hi.pak
  • GDHM_TASBOT_v36.9/locales/hr.pak
  • GDHM_TASBOT_v36.9/locales/hu.pak
  • GDHM_TASBOT_v36.9/locales/id.pak
  • GDHM_TASBOT_v36.9/locales/it.pak
  • GDHM_TASBOT_v36.9/locales/ja.pak
  • GDHM_TASBOT_v36.9/locales/kn.pak
  • GDHM_TASBOT_v36.9/locales/ko.pak
    .ps1
  • GDHM_TASBOT_v36.9/locales/lt.pak
  • GDHM_TASBOT_v36.9/locales/lv.pak
  • GDHM_TASBOT_v36.9/locales/ml.pak
  • GDHM_TASBOT_v36.9/locales/mr.pak
  • GDHM_TASBOT_v36.9/locales/ms.pak
    .ps1
  • GDHM_TASBOT_v36.9/locales/nb.pak
  • GDHM_TASBOT_v36.9/locales/nl.pak
  • GDHM_TASBOT_v36.9/locales/pl.pak
  • GDHM_TASBOT_v36.9/locales/pt-BR.pak
  • GDHM_TASBOT_v36.9/locales/pt-PT.pak
  • GDHM_TASBOT_v36.9/locales/ro.pak
  • GDHM_TASBOT_v36.9/locales/ru.pak
  • GDHM_TASBOT_v36.9/locales/sk.pak
  • GDHM_TASBOT_v36.9/locales/sl.pak
  • GDHM_TASBOT_v36.9/locales/sr.pak
  • GDHM_TASBOT_v36.9/locales/sv.pak
  • GDHM_TASBOT_v36.9/locales/sw.pak
  • GDHM_TASBOT_v36.9/locales/ta.pak
  • GDHM_TASBOT_v36.9/locales/te.pak
  • GDHM_TASBOT_v36.9/locales/th.pak
  • GDHM_TASBOT_v36.9/locales/tr.pak
  • GDHM_TASBOT_v36.9/locales/uk.pak
  • GDHM_TASBOT_v36.9/locales/ur.pak
  • GDHM_TASBOT_v36.9/locales/vi.pak
  • GDHM_TASBOT_v36.9/locales/zh-CN.pak
    .ps1
  • GDHM_TASBOT_v36.9/locales/zh-TW.pak
  • GDHM_TASBOT_v36.9/resources.pak
  • GDHM_TASBOT_v36.9/xinput9_1_0.dll
    .dll windows:6 windows x86 arch:x86

    fa2645f1904bcefa56bcf15ca3dde2b2


    Headers

    Imports

    Exports

    Sections