Overview
overview
3Static
static
3AbyssGDPS/...ep.ps1
windows7-x64
1AbyssGDPS/...ep.ps1
windows10-2004-x64
1AbyssGDPS/...ps.exe
windows7-x64
3AbyssGDPS/...ps.exe
windows10-2004-x64
3AbyssGDPS/...od.dll
windows7-x64
1AbyssGDPS/...od.dll
windows10-2004-x64
3AbyssGDPS/...32.dll
windows7-x64
3AbyssGDPS/...32.dll
windows10-2004-x64
3AbyssGDPS/...nv.dll
windows7-x64
3AbyssGDPS/...nv.dll
windows10-2004-x64
3AbyssGDPS/...ns.dll
windows7-x64
3AbyssGDPS/...ns.dll
windows10-2004-x64
3AbyssGDPS/...2d.dll
windows7-x64
3AbyssGDPS/...2d.dll
windows10-2004-x64
3AbyssGDPS/...rl.dll
windows7-x64
3AbyssGDPS/...rl.dll
windows10-2004-x64
3AbyssGDPS/...ff.dll
windows7-x64
1AbyssGDPS/...ff.dll
windows10-2004-x64
1AbyssGDPS/...E2.dll
windows7-x64
1AbyssGDPS/...E2.dll
windows10-2004-x64
1AbyssGDPS/...et.dll
windows7-x64
1AbyssGDPS/...et.dll
windows10-2004-x64
1AbyssGDPS/...e3.dll
windows7-x64
3AbyssGDPS/...e3.dll
windows10-2004-x64
3AbyssGDPS/...pi.dll
windows7-x64
1AbyssGDPS/...pi.dll
windows10-2004-x64
1AbyssGDPS/...ts.dll
windows7-x64
3AbyssGDPS/...ts.dll
windows10-2004-x64
3AbyssGDPS/...b1.dll
windows7-x64
3AbyssGDPS/...b1.dll
windows10-2004-x64
3Analysis
-
max time kernel
115s -
max time network
274s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
24-04-2024 17:39
Static task
static1
Behavioral task
behavioral1
Sample
AbyssGDPS/AbyssGDPS/Resources/xStep.ps1
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
AbyssGDPS/AbyssGDPS/Resources/xStep.ps1
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
AbyssGDPS/AbyssGDPS/abyssgdps.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
AbyssGDPS/AbyssGDPS/abyssgdps.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
AbyssGDPS/AbyssGDPS/fmod.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
AbyssGDPS/AbyssGDPS/fmod.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
AbyssGDPS/AbyssGDPS/glew32.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
AbyssGDPS/AbyssGDPS/glew32.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
AbyssGDPS/AbyssGDPS/iconv.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
AbyssGDPS/AbyssGDPS/iconv.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
AbyssGDPS/AbyssGDPS/libExtensions.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
AbyssGDPS/AbyssGDPS/libExtensions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
AbyssGDPS/AbyssGDPS/libcocos2d.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
AbyssGDPS/AbyssGDPS/libcocos2d.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
AbyssGDPS/AbyssGDPS/libcurl.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
AbyssGDPS/AbyssGDPS/libcurl.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
AbyssGDPS/AbyssGDPS/libtiff.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
AbyssGDPS/AbyssGDPS/libtiff.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
AbyssGDPS/AbyssGDPS/pthreadVCE2.dll
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
AbyssGDPS/AbyssGDPS/pthreadVCE2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
AbyssGDPS/AbyssGDPS/sdkencryptedappticket.dll
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
AbyssGDPS/AbyssGDPS/sdkencryptedappticket.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
AbyssGDPS/AbyssGDPS/sqlite3.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
AbyssGDPS/AbyssGDPS/sqlite3.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
AbyssGDPS/AbyssGDPS/steam_api.dll
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
AbyssGDPS/AbyssGDPS/steam_api.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
AbyssGDPS/AbyssGDPS/websockets.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
AbyssGDPS/AbyssGDPS/websockets.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
AbyssGDPS/AbyssGDPS/zlib1.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
AbyssGDPS/AbyssGDPS/zlib1.dll
Resource
win10v2004-20240412-en
General
-
Target
AbyssGDPS/AbyssGDPS/abyssgdps.exe
-
Size
8.5MB
-
MD5
b0cda5700b3604fa44c068359fdb9711
-
SHA1
02a474211ef61c794901403e5f83d35155416a43
-
SHA256
2935911c30d255e2b3995102c2c9d58c0d1112a0b7dd21449a2c20bd8a3f7052
-
SHA512
101ad56d334f2d646200503cc519890411abc3050e0d4395f997bb81e3c3ab71adc22f259ad9757ce809a5f30c97e0f9962dc598bb9059e8bb11d0aad0329a5c
-
SSDEEP
98304:AV+mMdl51ycMEUGNmOw/abBRtIQ1Pdhb4JmULWpcoCZvsj6r2t9+ESeT0mdmC4Do:AsmMrBMEjUOPdM0ULfL
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4220 1668 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\AbyssGDPS\AbyssGDPS\abyssgdps.exe"C:\Users\Admin\AppData\Local\Temp\AbyssGDPS\AbyssGDPS\abyssgdps.exe"1⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 9322⤵
- Program crash
PID:4220
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 1668 -ip 16681⤵PID:2428