General
-
Target
GlobalProtect64.msi
-
Size
146.6MB
-
Sample
240212-y27a4adc27
-
MD5
9439176ef49420d5f408ee9387297988
-
SHA1
b3feeb18c62089147cd7f25c9dcfd645f89ff6ec
-
SHA256
bfdfef5780bbc10ad826e9ae3039fb04434ac02a16d86b8ab6be89eedf48d770
-
SHA512
06c97edfe8cd33325f35c5d757d7d45557263f96df0778c9600dc923845176ab9192cd1393b96914139b074e96850f1b549cabc65d703e0e1341a5660b0f5a61
-
SSDEEP
3145728:HcsxNSn9OR7owDYqEa/7zFBQsrQzxY6hqb5VaBVnlBcRiN:H/xNDlowDYqE47PQsrQCXVIR2RiN
Static task
static1
Behavioral task
behavioral1
Sample
GlobalProtect64.msi
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
GlobalProtect64.msi
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
GlobalProtect64.msi
-
Size
146.6MB
-
MD5
9439176ef49420d5f408ee9387297988
-
SHA1
b3feeb18c62089147cd7f25c9dcfd645f89ff6ec
-
SHA256
bfdfef5780bbc10ad826e9ae3039fb04434ac02a16d86b8ab6be89eedf48d770
-
SHA512
06c97edfe8cd33325f35c5d757d7d45557263f96df0778c9600dc923845176ab9192cd1393b96914139b074e96850f1b549cabc65d703e0e1341a5660b0f5a61
-
SSDEEP
3145728:HcsxNSn9OR7owDYqEa/7zFBQsrQzxY6hqb5VaBVnlBcRiN:H/xNDlowDYqE47PQsrQCXVIR2RiN
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-