General

  • Target

    GDLauncher-win-setup.exe

  • Size

    73.9MB

  • Sample

    240222-wa41jsdf79

  • MD5

    05882ff7f159734468f66e60cb10f316

  • SHA1

    ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4e

  • SHA256

    9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa

  • SHA512

    70f44f7adf0bda370485ee5c88f58b995d3023d535f9544696c45949b7515879ad8a4c5848e0e82cf8babacc84da6ab73834198a28582ef4870b9e088e433da0

  • SSDEEP

    1572864:wlUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasRl:wmbL9g8Opjvi6WA+kumasRl

Score
7/10

Malware Config

Targets

    • Target

      GDLauncher-win-setup.exe

    • Size

      73.9MB

    • MD5

      05882ff7f159734468f66e60cb10f316

    • SHA1

      ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4e

    • SHA256

      9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa

    • SHA512

      70f44f7adf0bda370485ee5c88f58b995d3023d535f9544696c45949b7515879ad8a4c5848e0e82cf8babacc84da6ab73834198a28582ef4870b9e088e433da0

    • SSDEEP

      1572864:wlUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasRl:wmbL9g8Opjvi6WA+kumasRl

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target

      $PLUGINSDIR/SpiderBanner.dll

    • Size

      9KB

    • MD5

      17309e33b596ba3a5693b4d3e85cf8d7

    • SHA1

      7d361836cf53df42021c7f2b148aec9458818c01

    • SHA256

      996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    • SHA512

      1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

    • SSDEEP

      192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY

    Score
    1/10
    • Target

      $PLUGINSDIR/StdUtils.dll

    • Size

      100KB

    • MD5

      c6a6e03f77c313b267498515488c5740

    • SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    • SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    • SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • SSDEEP

      3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

    • SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

    • SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    • SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • SSDEEP

      192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6

    Score
    3/10
    • Target

      $PLUGINSDIR/WinShell.dll

    • Size

      3KB

    • MD5

      1cc7c37b7e0c8cd8bf04b6cc283e1e56

    • SHA1

      0b9519763be6625bd5abce175dcc59c96d100d4c

    • SHA256

      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    • SHA512

      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

    Score
    3/10
    • Target

      $PLUGINSDIR/app-64.7z

    • Size

      73.4MB

    • MD5

      afec0f2238e49b55a4a95b097e6a07e8

    • SHA1

      e1b1f85c3ea7f1cf64ab95850232d7fe84de6653

    • SHA256

      98003b4fcd41d7ee18ae2afdf072d67f48eacfc688294462e5cb2eab91a21897

    • SHA512

      c3cb647a7ccc0d9ce08f1bc5e4b1a31b9ecdb4b4562fe9b8a1dfabd2f710518775e31dcbb459f84346e675485938c806fd9b8c667ece51e247ca05b2c2cdf97a

    • SSDEEP

      1572864:pUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasR9:ibL9g8Opjvi6WA+kumasR9

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      7za.exe

    • Size

      1.1MB

    • MD5

      e86eff95691b1c0e7e4f3e9cb1ae2e49

    • SHA1

      d0acbf9ae29ec74acc67b53b2063bbc9739bc9e8

    • SHA256

      8117e40ee7f824f63373a4f5625bb62749f69159d0c449b3ce2f35aad3b83549

    • SHA512

      1c26201f214fc068d2d7f7c812be022dbc102077ef34bc1f231ac118aa04b94139cc2005628491747888faf95863241b3847524db097f4822b75f646f4345ff6

    • SSDEEP

      24576:IyotkuwTgCfs7Ck+PCZbS1IJdJ0FAH48fw2:ITtkVxkdyCZbS1oCFo/fw

    Score
    1/10
    • Target

      GDLauncher.exe

    • Size

      142.0MB

    • MD5

      51dc199e41223520217f34624b276e18

    • SHA1

      0ce3f6b9a26759b21a23bf25ed34b1b7ce624295

    • SHA256

      0b3c6bce1a0a61414a7e3048616c6dbfd55a2233b7ead7c4666d7d0c59e1ff50

    • SHA512

      c40e9d4b8db3ce4d195f0e634b48f4b7f1da74070ec2a9bf3db4b543d819a712a011496d99da6fdd6461305c012f808c7761363a6ef2b137bb58a439485fc42c

    • SSDEEP

      1572864:Zx8e2z2aMcuE5p9vzLECsyP2d+J/AG8TQX60:vLabp9rY/W6

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Target

      LICENSES.chromium.html

    • Size

      5.1MB

    • MD5

      f0882b4f2a11c1f0c524388c3307aad7

    • SHA1

      c8952b4076167de1374d0c1f62b1fde8fe69f4ae

    • SHA256

      1b8b8e268755376e95aaddd0a6881f6f4a4b96787af1b2db158e51958410da5f

    • SHA512

      1e5cd07637e213d3f77f8a6204b5bb9a6e16c343790dda4ed677b081e8600de912165bb3436dacf56ea2e5145e888f5964deda4ee4b7dd3516ae2cab42e2fa0f

    • SSDEEP

      12288:FetnJnVncnJnkncnpWQtnwn7n9nJnCnZnGn3eQSnqnBnununFn/nwnJnqnvnOnqP:nPDt5WXWSNkbfwVR8mfjF4HyCohp1

    Score
    1/10
    • Target

      chrome_100_percent.pak

    • Size

      125KB

    • MD5

      0cf9de69dcfd8227665e08c644b9499c

    • SHA1

      a27941acce0101627304e06533ba24f13e650e43

    • SHA256

      d2c299095dbbd3a3cb2b4639e5b3bd389c691397ffd1a681e586f2cfe0e2ab88

    • SHA512

      bb5d340009cef2bcb604ef38fdd7171fed0423c2dc6a01e590f8d15c4f6bc860606547550218db41fba554609e8395c9e3c3508dfa2d8b202e5059e7646bdcef

    • SSDEEP

      3072:ogKzwI/4wKN3/nXCWZQCPxBVO2o418Gb0+VRLf0ld0GY3cQ39x2I:ogKzwI/49NPyCtoK18Gb0OV8ld0GecQ1

    Score
    3/10
    • Target

      chrome_200_percent.pak

    • Size

      174KB

    • MD5

      d88936315a5bd83c1550e5b8093eb1e6

    • SHA1

      6445d97ceb89635f6459bc2fb237324d66e6a4ee

    • SHA256

      f49abd81e93a05c1e53c1201a5d3a12f2724f52b6971806c8306b512bf66aa25

    • SHA512

      75142f03df6187fb75f887e4c8b9d5162902ba6aac86351186c85e5f0a2d3825ca312a36cf9f4bd656cdfc23a20cd38d4580ca1b41560d23ebaa0d41e4cf1dd2

    • SSDEEP

      3072:YDQYaEqQZUYUJP1N3/nXCWZQCPxBVrfR54x5GMR+F44ffbdZnYw9p4AbIVGYoDdR:YDQYaRyY1NPyCt9gx5GMRejnbdZnVE6j

    Score
    3/10
    • Target

      concrt140.dll

    • Size

      324KB

    • MD5

      1028995446d0032530461be30ca98f48

    • SHA1

      18446678152e9997eed9c02995f957d58a8e8f32

    • SHA256

      d404b49c25cc76dc4c86e1d82fc23799482f6509e85a73ed8177efc320ec0195

    • SHA512

      adb9ae577f082e0246cae5c804fa4cd08bcf54ce78eaca02d49b9b1b262779667a251e98cae807aff50fdac504b8cd855ce4d786f587d02e0a18f6ac8e0d882e

    • SSDEEP

      6144:tlBybiGsY4lxA6c40PMjoTrDPbv+Xipv6wfnWzgcpw2eRJ:tWbzsBcPPlbxpvIzQT

    Score
    1/10
    • Target

      d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      cb9807f6cf55ad799e920b7e0f97df99

    • SHA1

      bb76012ded5acd103adad49436612d073d159b29

    • SHA256

      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

    • SHA512

      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

    • SSDEEP

      49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI

    Score
    1/10
    • Target

      ffmpeg.dll

    • Size

      2.7MB

    • MD5

      f459ce9af5091bc1e450eb753f6eb0b7

    • SHA1

      9df32de240dfaa780640361b1d0ca978a611fa27

    • SHA256

      e7714a1d6ac3f4c4ae22564b9ca301e486f5f42691859c0a687246c47b5cf5c9

    • SHA512

      7d626e5a94af43c8c0cca4bf0dc2e4fa61e147f1360f19ed8922a1dac4c5df642bca435f84baf05b38255edd2b72de79c07f97f1f7ec79b7c04e336c454ba63b

    • SSDEEP

      49152:7qLAtO2mAixsA2vE/nOootJhW8L32xfnok0TvMzEKJ7UWyTIQVRU5GkJtdj02b3M:/tnqOoowS32xf90m71yTIQVRU5GkJOlp

    Score
    1/10
    • Target

      icudtl.dat

    • Size

      9.9MB

    • MD5

      c6ae43f9d596f3dd0d86fb3e62a5b5de

    • SHA1

      198b3b4abc0f128398d25c66455c531a7af34a6d

    • SHA256

      00f755664926fda5fda14b87af41097f6ea4b20154f90be65d73717580db26ee

    • SHA512

      3c43e2dcdf037726a94319a147a8bc41a4c0fd66e6b18b3c7c95449912bf875382dde5ec0525dcad6a52e8820b0859caf8fa73cb287283334ec8d06eb3227ec4

    • SSDEEP

      196608:tGzwSv9AAQu1+liXUxCGZHa93Whlw6ZzbSEQF:t3KlQusliXUxCGZHa93Whlw6ZzbSEQF

    Score
    3/10
    • Target

      libEGL.dll

    • Size

      460KB

    • MD5

      5de7e395632af0d31d8165ee5e5267dd

    • SHA1

      740ae64850e72e5ab3d49e3bbc785399a30a933e

    • SHA256

      44febbc02e69d492d39e2cd5d025bbf0d81b1889b37725bd700cc0c21e5ba22a

    • SHA512

      788c3fa6d58b8d3ae258628805ed79d612d9e15e92dca39c27cb621a2a9aa42669a20c11b5c9a912a2d8cd68b0a7a53f7689e729067c6d87a8063e5b8b2c265d

    • SSDEEP

      6144:3KEcTs/jvtGCIvT/BIy/71C6h7i6DPgwlXwuxkC8wmij8hLeC+:3KEcTs/jvtGCIb/BI/CLPzxk7wmij0

    Score
    1/10
    • Target

      libGLESv2.dll

    • Size

      6.8MB

    • MD5

      f96fc251bae55a5fc0f1ddaed8706015

    • SHA1

      532c2b51f5e3256777ae3b9f40c8067b20eee0a2

    • SHA256

      7897eb2441975523e3e78dbeabf2d9deba66534c69b6cefbf87ea638ee641ea6

    • SHA512

      cf2f9f126204596e37bbe5517500a738ad06f306cb49e7a36bc050e38a61191a767e5d3fecd570410f08d67b64e77019101b2970867e8f0d41b35a6526d3d280

    • SSDEEP

      49152:BVjYuYQiOJYXEPdX++aEVQwXW0LXoJihD9BV1W6X+AIt8k9C3NRKRzDGYCvktcKx:fd++tVQeWQhUkkKIGLJWr/bm

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks