9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa

Sharing

Copy URL Twitter E-mail

General

Target
GDLauncher-win-setup.exe
Size 73.9MB
Sample240222-wa41jsdf79
SHA256 9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa
MD5 05882ff7f159734468f66e60cb10f316
SHA1 ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4e
SHA512 70f44f7adf0bda370485ee5c88f58b995d3023d535f9544696c45949b7515879ad8a4c5848e0e82cf8babacc84da6ab73834198a28582ef4870b9e088e433da0
SSDEEP 1572864:wlUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasRl:wmbL9g8Opjvi6WA+kumasRl
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Targets

- Target
  GDLauncher-win-setup.exe
- Size 73.9MB
- SHA256 9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa
- MD5 05882ff7f159734468f66e60cb10f316
- SHA1 ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4e
- SHA512 70f44f7adf0bda370485ee5c88f58b995d3023d535f9544696c45949b7515879ad8a4c5848e0e82cf8babacc84da6ab73834198a28582ef4870b9e088e433da0
- SSDEEP 1572864:wlUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasRl:wmbL9g8Opjvi6WA+kumasRl
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- MD5 SHA1 SHA512
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/app-64.7z
- Size 73.4MB
- SHA256 98003b4fcd41d7ee18ae2afdf072d67f48eacfc688294462e5cb2eab91a21897
- MD5 afec0f2238e49b55a4a95b097e6a07e8
- SHA1 e1b1f85c3ea7f1cf64ab95850232d7fe84de6653
- SHA512 c3cb647a7ccc0d9ce08f1bc5e4b1a31b9ecdb4b4562fe9b8a1dfabd2f710518775e31dcbb459f84346e675485938c806fd9b8c667ece51e247ca05b2c2cdf97a
- SSDEEP 1572864:pUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasR9:ibL9g8Opjvi6WA+kumasR9
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  7za.exe
- Size 1.1MB
- SHA256 8117e40ee7f824f63373a4f5625bb62749f69159d0c449b3ce2f35aad3b83549
- MD5 e86eff95691b1c0e7e4f3e9cb1ae2e49
- SHA1 d0acbf9ae29ec74acc67b53b2063bbc9739bc9e8
- SHA512 1c26201f214fc068d2d7f7c812be022dbc102077ef34bc1f231ac118aa04b94139cc2005628491747888faf95863241b3847524db097f4822b75f646f4345ff6
- SSDEEP 24576:IyotkuwTgCfs7Ck+PCZbS1IJdJ0FAH48fw2:ITtkVxkdyCZbS1oCFo/fw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  GDLauncher.exe
- Size 142.0MB
- SHA256 0b3c6bce1a0a61414a7e3048616c6dbfd55a2233b7ead7c4666d7d0c59e1ff50
- MD5 51dc199e41223520217f34624b276e18
- SHA1 0ce3f6b9a26759b21a23bf25ed34b1b7ce624295
- SHA512 c40e9d4b8db3ce4d195f0e634b48f4b7f1da74070ec2a9bf3db4b543d819a712a011496d99da6fdd6461305c012f808c7761363a6ef2b137bb58a439485fc42c
- SSDEEP 1572864:Zx8e2z2aMcuE5p9vzLECsyP2d+J/AG8TQX60:vLabp9rY/W6
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral15 behavioral16
- Target
  LICENSES.chromium.html
- Size 5.1MB
- SHA256 1b8b8e268755376e95aaddd0a6881f6f4a4b96787af1b2db158e51958410da5f
- MD5 f0882b4f2a11c1f0c524388c3307aad7
- SHA1 c8952b4076167de1374d0c1f62b1fde8fe69f4ae
- SHA512 1e5cd07637e213d3f77f8a6204b5bb9a6e16c343790dda4ed677b081e8600de912165bb3436dacf56ea2e5145e888f5964deda4ee4b7dd3516ae2cab42e2fa0f
- SSDEEP 12288:FetnJnVncnJnkncnpWQtnwn7n9nJnCnZnGn3eQSnqnBnununFn/nwnJnqnvnOnqP:nPDt5WXWSNkbfwVR8mfjF4HyCohp1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  chrome_100_percent.pak
- Size 125KB
- SHA256 d2c299095dbbd3a3cb2b4639e5b3bd389c691397ffd1a681e586f2cfe0e2ab88
- MD5 0cf9de69dcfd8227665e08c644b9499c
- SHA1 a27941acce0101627304e06533ba24f13e650e43
- SHA512 bb5d340009cef2bcb604ef38fdd7171fed0423c2dc6a01e590f8d15c4f6bc860606547550218db41fba554609e8395c9e3c3508dfa2d8b202e5059e7646bdcef
- SSDEEP 3072:ogKzwI/4wKN3/nXCWZQCPxBVO2o418Gb0+VRLf0ld0GY3cQ39x2I:ogKzwI/49NPyCtoK18Gb0OV8ld0GecQ1
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  chrome_200_percent.pak
- Size 174KB
- SHA256 f49abd81e93a05c1e53c1201a5d3a12f2724f52b6971806c8306b512bf66aa25
- MD5 d88936315a5bd83c1550e5b8093eb1e6
- SHA1 6445d97ceb89635f6459bc2fb237324d66e6a4ee
- SHA512 75142f03df6187fb75f887e4c8b9d5162902ba6aac86351186c85e5f0a2d3825ca312a36cf9f4bd656cdfc23a20cd38d4580ca1b41560d23ebaa0d41e4cf1dd2
- SSDEEP 3072:YDQYaEqQZUYUJP1N3/nXCWZQCPxBVrfR54x5GMR+F44ffbdZnYw9p4AbIVGYoDdR:YDQYaRyY1NPyCt9gx5GMRejnbdZnVE6j
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  concrt140.dll
- Size 324KB
- SHA256 d404b49c25cc76dc4c86e1d82fc23799482f6509e85a73ed8177efc320ec0195
- MD5 1028995446d0032530461be30ca98f48
- SHA1 18446678152e9997eed9c02995f957d58a8e8f32
- SHA512 adb9ae577f082e0246cae5c804fa4cd08bcf54ce78eaca02d49b9b1b262779667a251e98cae807aff50fdac504b8cd855ce4d786f587d02e0a18f6ac8e0d882e
- SSDEEP 6144:tlBybiGsY4lxA6c40PMjoTrDPbv+Xipv6wfnWzgcpw2eRJ:tWbzsBcPPlbxpvIzQT
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
- MD5 cb9807f6cf55ad799e920b7e0f97df99
- SHA1 bb76012ded5acd103adad49436612d073d159b29
- SHA512 f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
- SSDEEP 49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25
- Target
  ffmpeg.dll
- Size 2.7MB
- SHA256 e7714a1d6ac3f4c4ae22564b9ca301e486f5f42691859c0a687246c47b5cf5c9
- MD5 f459ce9af5091bc1e450eb753f6eb0b7
- SHA1 9df32de240dfaa780640361b1d0ca978a611fa27
- SHA512 7d626e5a94af43c8c0cca4bf0dc2e4fa61e147f1360f19ed8922a1dac4c5df642bca435f84baf05b38255edd2b72de79c07f97f1f7ec79b7c04e336c454ba63b
- SSDEEP 49152:7qLAtO2mAixsA2vE/nOootJhW8L32xfnok0TvMzEKJ7UWyTIQVRU5GkJtdj02b3M:/tnqOoowS32xf90m71yTIQVRU5GkJOlp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral26 behavioral27
- Target
  icudtl.dat
- Size 9.9MB
- SHA256 00f755664926fda5fda14b87af41097f6ea4b20154f90be65d73717580db26ee
- MD5 c6ae43f9d596f3dd0d86fb3e62a5b5de
- SHA1 198b3b4abc0f128398d25c66455c531a7af34a6d
- SHA512 3c43e2dcdf037726a94319a147a8bc41a4c0fd66e6b18b3c7c95449912bf875382dde5ec0525dcad6a52e8820b0859caf8fa73cb287283334ec8d06eb3227ec4
- SSDEEP 196608:tGzwSv9AAQu1+liXUxCGZHa93Whlw6ZzbSEQF:t3KlQusliXUxCGZHa93Whlw6ZzbSEQF
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral28 behavioral29
- Target
  libEGL.dll
- Size 460KB
- SHA256 44febbc02e69d492d39e2cd5d025bbf0d81b1889b37725bd700cc0c21e5ba22a
- MD5 5de7e395632af0d31d8165ee5e5267dd
- SHA1 740ae64850e72e5ab3d49e3bbc785399a30a933e
- SHA512 788c3fa6d58b8d3ae258628805ed79d612d9e15e92dca39c27cb621a2a9aa42669a20c11b5c9a912a2d8cd68b0a7a53f7689e729067c6d87a8063e5b8b2c265d
- SSDEEP 6144:3KEcTs/jvtGCIvT/BIy/71C6h7i6DPgwlXwuxkC8wmij8hLeC+:3KEcTs/jvtGCIb/BI/CLPzxk7wmij0
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30 behavioral31
- Target
  libGLESv2.dll
- Size 6.8MB
- SHA256 7897eb2441975523e3e78dbeabf2d9deba66534c69b6cefbf87ea638ee641ea6
- MD5 f96fc251bae55a5fc0f1ddaed8706015
- SHA1 532c2b51f5e3256777ae3b9f40c8067b20eee0a2
- SHA512 cf2f9f126204596e37bbe5517500a738ad06f306cb49e7a36bc050e38a61191a767e5d3fecd570410f08d67b64e77019101b2970867e8f0d41b35a6526d3d280
- SSDEEP 49152:BVjYuYQiOJYXEPdX++aEVQwXW0LXoJihD9BV1W6X+AIt8k9C3NRKRzDGYCvktcKx:fd++tVQeWQhUkkKIGLJWr/bm
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks computer location settings

Checks computer location settings

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32