Overview
overview
7Static
static
3GDLauncher...up.exe
windows7-x64
7GDLauncher...up.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDIR/app-64.7z
windows7-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
77za.exe
windows7-x64
17za.exe
windows10-2004-x64
1GDLauncher.exe
windows7-x64
7GDLauncher.exe
windows10-2004-x64
7LICENSES.c...m.html
windows7-x64
1LICENSES.c...m.html
windows10-2004-x64
1chrome_100...nt.pak
windows7-x64
3chrome_100...nt.pak
windows10-2004-x64
3chrome_200...nt.pak
windows7-x64
3chrome_200...nt.pak
windows10-2004-x64
3concrt140.dll
windows7-x64
1concrt140.dll
windows10-2004-x64
1d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1icudtl.dat
windows7-x64
3icudtl.dat
windows10-2004-x64
3libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
1General
-
Target
GDLauncher-win-setup.exe
-
Size
73.9MB
-
Sample
240222-wa41jsdf79
-
MD5
05882ff7f159734468f66e60cb10f316
-
SHA1
ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4e
-
SHA256
9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa
-
SHA512
70f44f7adf0bda370485ee5c88f58b995d3023d535f9544696c45949b7515879ad8a4c5848e0e82cf8babacc84da6ab73834198a28582ef4870b9e088e433da0
-
SSDEEP
1572864:wlUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasRl:wmbL9g8Opjvi6WA+kumasRl
Static task
static1
Behavioral task
behavioral1
Sample
GDLauncher-win-setup.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
GDLauncher-win-setup.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
7za.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
7za.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
GDLauncher.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
GDLauncher.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
LICENSES.chromium.html
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
LICENSES.chromium.html
Resource
win10v2004-20240221-en
Behavioral task
behavioral19
Sample
chrome_100_percent.pak
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
chrome_100_percent.pak
Resource
win10v2004-20240221-en
Behavioral task
behavioral21
Sample
chrome_200_percent.pak
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
chrome_200_percent.pak
Resource
win10v2004-20240221-en
Behavioral task
behavioral23
Sample
concrt140.dll
Resource
win7-20240215-en
Behavioral task
behavioral24
Sample
concrt140.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral25
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral26
Sample
ffmpeg.dll
Resource
win7-20240221-en
Behavioral task
behavioral27
Sample
ffmpeg.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral28
Sample
icudtl.dat
Resource
win7-20240221-en
Behavioral task
behavioral29
Sample
icudtl.dat
Resource
win10v2004-20240221-en
Behavioral task
behavioral30
Sample
libEGL.dll
Resource
win7-20240221-en
Behavioral task
behavioral31
Sample
libEGL.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral32
Sample
libGLESv2.dll
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
GDLauncher-win-setup.exe
-
Size
73.9MB
-
MD5
05882ff7f159734468f66e60cb10f316
-
SHA1
ec0b1d3fd2a67a5f85e2a8b1e04d69f4362b6b4e
-
SHA256
9a4744a9ea6fa058995157b052e1d96b7063039ab3971ce5660fe9cc29bea7aa
-
SHA512
70f44f7adf0bda370485ee5c88f58b995d3023d535f9544696c45949b7515879ad8a4c5848e0e82cf8babacc84da6ab73834198a28582ef4870b9e088e433da0
-
SSDEEP
1572864:wlUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasRl:wmbL9g8Opjvi6WA+kumasRl
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
$PLUGINSDIR/SpiderBanner.dll
-
Size
9KB
-
MD5
17309e33b596ba3a5693b4d3e85cf8d7
-
SHA1
7d361836cf53df42021c7f2b148aec9458818c01
-
SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
-
SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
-
SSDEEP
192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
Score1/10 -
-
-
Target
$PLUGINSDIR/StdUtils.dll
-
Size
100KB
-
MD5
c6a6e03f77c313b267498515488c5740
-
SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15
-
SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
-
SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
SSDEEP
3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
$PLUGINSDIR/WinShell.dll
-
Size
3KB
-
MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56
-
SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c
-
SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
-
SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score3/10 -
-
-
Target
$PLUGINSDIR/app-64.7z
-
Size
73.4MB
-
MD5
afec0f2238e49b55a4a95b097e6a07e8
-
SHA1
e1b1f85c3ea7f1cf64ab95850232d7fe84de6653
-
SHA256
98003b4fcd41d7ee18ae2afdf072d67f48eacfc688294462e5cb2eab91a21897
-
SHA512
c3cb647a7ccc0d9ce08f1bc5e4b1a31b9ecdb4b4562fe9b8a1dfabd2f710518775e31dcbb459f84346e675485938c806fd9b8c667ece51e247ca05b2c2cdf97a
-
SSDEEP
1572864:pUFqwL0Iy/oa8Opjvi6zTGAJPpnOkKxnJcasR9:ibL9g8Opjvi6WA+kumasR9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
7za.exe
-
Size
1.1MB
-
MD5
e86eff95691b1c0e7e4f3e9cb1ae2e49
-
SHA1
d0acbf9ae29ec74acc67b53b2063bbc9739bc9e8
-
SHA256
8117e40ee7f824f63373a4f5625bb62749f69159d0c449b3ce2f35aad3b83549
-
SHA512
1c26201f214fc068d2d7f7c812be022dbc102077ef34bc1f231ac118aa04b94139cc2005628491747888faf95863241b3847524db097f4822b75f646f4345ff6
-
SSDEEP
24576:IyotkuwTgCfs7Ck+PCZbS1IJdJ0FAH48fw2:ITtkVxkdyCZbS1oCFo/fw
Score1/10 -
-
-
Target
GDLauncher.exe
-
Size
142.0MB
-
MD5
51dc199e41223520217f34624b276e18
-
SHA1
0ce3f6b9a26759b21a23bf25ed34b1b7ce624295
-
SHA256
0b3c6bce1a0a61414a7e3048616c6dbfd55a2233b7ead7c4666d7d0c59e1ff50
-
SHA512
c40e9d4b8db3ce4d195f0e634b48f4b7f1da74070ec2a9bf3db4b543d819a712a011496d99da6fdd6461305c012f808c7761363a6ef2b137bb58a439485fc42c
-
SSDEEP
1572864:Zx8e2z2aMcuE5p9vzLECsyP2d+J/AG8TQX60:vLabp9rY/W6
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
-
-
Target
LICENSES.chromium.html
-
Size
5.1MB
-
MD5
f0882b4f2a11c1f0c524388c3307aad7
-
SHA1
c8952b4076167de1374d0c1f62b1fde8fe69f4ae
-
SHA256
1b8b8e268755376e95aaddd0a6881f6f4a4b96787af1b2db158e51958410da5f
-
SHA512
1e5cd07637e213d3f77f8a6204b5bb9a6e16c343790dda4ed677b081e8600de912165bb3436dacf56ea2e5145e888f5964deda4ee4b7dd3516ae2cab42e2fa0f
-
SSDEEP
12288:FetnJnVncnJnkncnpWQtnwn7n9nJnCnZnGn3eQSnqnBnununFn/nwnJnqnvnOnqP:nPDt5WXWSNkbfwVR8mfjF4HyCohp1
Score1/10 -
-
-
Target
chrome_100_percent.pak
-
Size
125KB
-
MD5
0cf9de69dcfd8227665e08c644b9499c
-
SHA1
a27941acce0101627304e06533ba24f13e650e43
-
SHA256
d2c299095dbbd3a3cb2b4639e5b3bd389c691397ffd1a681e586f2cfe0e2ab88
-
SHA512
bb5d340009cef2bcb604ef38fdd7171fed0423c2dc6a01e590f8d15c4f6bc860606547550218db41fba554609e8395c9e3c3508dfa2d8b202e5059e7646bdcef
-
SSDEEP
3072:ogKzwI/4wKN3/nXCWZQCPxBVO2o418Gb0+VRLf0ld0GY3cQ39x2I:ogKzwI/49NPyCtoK18Gb0OV8ld0GecQ1
Score3/10 -
-
-
Target
chrome_200_percent.pak
-
Size
174KB
-
MD5
d88936315a5bd83c1550e5b8093eb1e6
-
SHA1
6445d97ceb89635f6459bc2fb237324d66e6a4ee
-
SHA256
f49abd81e93a05c1e53c1201a5d3a12f2724f52b6971806c8306b512bf66aa25
-
SHA512
75142f03df6187fb75f887e4c8b9d5162902ba6aac86351186c85e5f0a2d3825ca312a36cf9f4bd656cdfc23a20cd38d4580ca1b41560d23ebaa0d41e4cf1dd2
-
SSDEEP
3072:YDQYaEqQZUYUJP1N3/nXCWZQCPxBVrfR54x5GMR+F44ffbdZnYw9p4AbIVGYoDdR:YDQYaRyY1NPyCt9gx5GMRejnbdZnVE6j
Score3/10 -
-
-
Target
concrt140.dll
-
Size
324KB
-
MD5
1028995446d0032530461be30ca98f48
-
SHA1
18446678152e9997eed9c02995f957d58a8e8f32
-
SHA256
d404b49c25cc76dc4c86e1d82fc23799482f6509e85a73ed8177efc320ec0195
-
SHA512
adb9ae577f082e0246cae5c804fa4cd08bcf54ce78eaca02d49b9b1b262779667a251e98cae807aff50fdac504b8cd855ce4d786f587d02e0a18f6ac8e0d882e
-
SSDEEP
6144:tlBybiGsY4lxA6c40PMjoTrDPbv+Xipv6wfnWzgcpw2eRJ:tWbzsBcPPlbxpvIzQT
Score1/10 -
-
-
Target
d3dcompiler_47.dll
-
Size
4.7MB
-
MD5
cb9807f6cf55ad799e920b7e0f97df99
-
SHA1
bb76012ded5acd103adad49436612d073d159b29
-
SHA256
5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
-
SHA512
f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
-
SSDEEP
49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
Score1/10 -
-
-
Target
ffmpeg.dll
-
Size
2.7MB
-
MD5
f459ce9af5091bc1e450eb753f6eb0b7
-
SHA1
9df32de240dfaa780640361b1d0ca978a611fa27
-
SHA256
e7714a1d6ac3f4c4ae22564b9ca301e486f5f42691859c0a687246c47b5cf5c9
-
SHA512
7d626e5a94af43c8c0cca4bf0dc2e4fa61e147f1360f19ed8922a1dac4c5df642bca435f84baf05b38255edd2b72de79c07f97f1f7ec79b7c04e336c454ba63b
-
SSDEEP
49152:7qLAtO2mAixsA2vE/nOootJhW8L32xfnok0TvMzEKJ7UWyTIQVRU5GkJtdj02b3M:/tnqOoowS32xf90m71yTIQVRU5GkJOlp
Score1/10 -
-
-
Target
icudtl.dat
-
Size
9.9MB
-
MD5
c6ae43f9d596f3dd0d86fb3e62a5b5de
-
SHA1
198b3b4abc0f128398d25c66455c531a7af34a6d
-
SHA256
00f755664926fda5fda14b87af41097f6ea4b20154f90be65d73717580db26ee
-
SHA512
3c43e2dcdf037726a94319a147a8bc41a4c0fd66e6b18b3c7c95449912bf875382dde5ec0525dcad6a52e8820b0859caf8fa73cb287283334ec8d06eb3227ec4
-
SSDEEP
196608:tGzwSv9AAQu1+liXUxCGZHa93Whlw6ZzbSEQF:t3KlQusliXUxCGZHa93Whlw6ZzbSEQF
Score3/10 -
-
-
Target
libEGL.dll
-
Size
460KB
-
MD5
5de7e395632af0d31d8165ee5e5267dd
-
SHA1
740ae64850e72e5ab3d49e3bbc785399a30a933e
-
SHA256
44febbc02e69d492d39e2cd5d025bbf0d81b1889b37725bd700cc0c21e5ba22a
-
SHA512
788c3fa6d58b8d3ae258628805ed79d612d9e15e92dca39c27cb621a2a9aa42669a20c11b5c9a912a2d8cd68b0a7a53f7689e729067c6d87a8063e5b8b2c265d
-
SSDEEP
6144:3KEcTs/jvtGCIvT/BIy/71C6h7i6DPgwlXwuxkC8wmij8hLeC+:3KEcTs/jvtGCIb/BI/CLPzxk7wmij0
Score1/10 -
-
-
Target
libGLESv2.dll
-
Size
6.8MB
-
MD5
f96fc251bae55a5fc0f1ddaed8706015
-
SHA1
532c2b51f5e3256777ae3b9f40c8067b20eee0a2
-
SHA256
7897eb2441975523e3e78dbeabf2d9deba66534c69b6cefbf87ea638ee641ea6
-
SHA512
cf2f9f126204596e37bbe5517500a738ad06f306cb49e7a36bc050e38a61191a767e5d3fecd570410f08d67b64e77019101b2970867e8f0d41b35a6526d3d280
-
SSDEEP
49152:BVjYuYQiOJYXEPdX++aEVQwXW0LXoJihD9BV1W6X+AIt8k9C3NRKRzDGYCvktcKx:fd++tVQeWQhUkkKIGLJWr/bm
Score1/10 -