Overview
overview
3Static
static
3goodbyedpi...le.cmd
windows7-x64
1goodbyedpi...le.cmd
windows10-2004-x64
1goodbyedpi...st.cmd
windows7-x64
1goodbyedpi...st.cmd
windows10-2004-x64
1goodbyedpi...ir.cmd
windows7-x64
1goodbyedpi...ir.cmd
windows10-2004-x64
1goodbyedpi...ry.cmd
windows7-x64
1goodbyedpi...ry.cmd
windows10-2004-x64
1goodbyedpi...ir.cmd
windows7-x64
1goodbyedpi...ir.cmd
windows10-2004-x64
1goodbyedpi...st.cmd
windows7-x64
1goodbyedpi...st.cmd
windows10-2004-x64
1goodbyedpi...ir.cmd
windows7-x64
1goodbyedpi...ir.cmd
windows10-2004-x64
1goodbyedpi...ve.cmd
windows7-x64
1goodbyedpi...ve.cmd
windows10-2004-x64
1goodbyedpi...rt.dll
windows7-x64
1goodbyedpi...rt.dll
windows10-2004-x64
1goodbyedpi...32.sys
windows7-x64
1goodbyedpi...32.sys
windows10-2004-x64
1goodbyedpi...64.sys
windows7-x64
1goodbyedpi...64.sys
windows10-2004-x64
1goodbyedpi...pi.exe
windows7-x64
1goodbyedpi...pi.exe
windows10-2004-x64
1goodbyedpi...rt.dll
windows7-x64
1goodbyedpi...rt.dll
windows10-2004-x64
1goodbyedpi...64.sys
windows7-x64
1goodbyedpi...64.sys
windows10-2004-x64
1goodbyedpi...pi.exe
windows7-x64
1goodbyedpi...pi.exe
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23/02/2024, 17:18
Static task
static1
Behavioral task
behavioral1
Sample
goodbyedpi-0.2.2/0_russia_update_blacklist_file.cmd
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
goodbyedpi-0.2.2/0_russia_update_blacklist_file.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
goodbyedpi-0.2.2/1_russia_blacklist.cmd
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
goodbyedpi-0.2.2/1_russia_blacklist.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
goodbyedpi-0.2.2/1_russia_blacklist_dnsredir.cmd
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
goodbyedpi-0.2.2/1_russia_blacklist_dnsredir.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
goodbyedpi-0.2.2/2_any_country.cmd
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
goodbyedpi-0.2.2/2_any_country.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
goodbyedpi-0.2.2/2_any_country_dnsredir.cmd
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
goodbyedpi-0.2.2/2_any_country_dnsredir.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
goodbyedpi-0.2.2/service_install_russia_blacklist.cmd
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
goodbyedpi-0.2.2/service_install_russia_blacklist.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
goodbyedpi-0.2.2/service_install_russia_blacklist_dnsredir.cmd
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
goodbyedpi-0.2.2/service_install_russia_blacklist_dnsredir.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
goodbyedpi-0.2.2/service_remove.cmd
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
goodbyedpi-0.2.2/service_remove.cmd
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
goodbyedpi-0.2.2/x86/WinDivert.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
goodbyedpi-0.2.2/x86/WinDivert.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral19
Sample
goodbyedpi-0.2.2/x86/WinDivert32.sys
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
goodbyedpi-0.2.2/x86/WinDivert32.sys
Resource
win10v2004-20240221-en
Behavioral task
behavioral21
Sample
goodbyedpi-0.2.2/x86/WinDivert64.sys
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
goodbyedpi-0.2.2/x86/WinDivert64.sys
Resource
win10v2004-20240221-en
Behavioral task
behavioral23
Sample
goodbyedpi-0.2.2/x86/goodbyedpi.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
goodbyedpi-0.2.2/x86/goodbyedpi.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral25
Sample
goodbyedpi-0.2.2/x86_64/WinDivert.dll
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
goodbyedpi-0.2.2/x86_64/WinDivert.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral27
Sample
goodbyedpi-0.2.2/x86_64/WinDivert64.sys
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
goodbyedpi-0.2.2/x86_64/WinDivert64.sys
Resource
win10v2004-20240221-en
Behavioral task
behavioral29
Sample
goodbyedpi-0.2.2/x86_64/goodbyedpi.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
goodbyedpi-0.2.2/x86_64/goodbyedpi.exe
Resource
win10v2004-20240221-en
General
-
Target
goodbyedpi-0.2.2/x86_64/goodbyedpi.exe
-
Size
73KB
-
MD5
5a2136bcbc14293b4f88dfba3243dd0a
-
SHA1
349174de8d042d814bd28b171770391764195f1c
-
SHA256
331ac6c1d22ba5a0a217f3f27d0d823051869cafc8b8ef7f2002fa2accebc74e
-
SHA512
c844e5d36dfb52bff7a5c2f9d19530de094f811641d57a35bf7023b5dc9a134a83488f65389c5a9805b7afffd197175e15fae3f67ec3e0dc9d490e60daf693c5
-
SSDEEP
1536:0DUStjrGshxSrBwzh6E6xdK6aTe0yNgnIcm:0DUCjBhxSrazwqrUgID
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 672 Process not Found