Overview

overview

7

Static

static

3

GTweak.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    GTweak.exe

  • Size

    2.0MB

  • Sample

    240612-1mxjfsvgqp

  • MD5

    f39e25a531547d491058b65987601a08

  • SHA1

    2aff7da8a4b750885426410ecba9b16e10ccaa9b

  • SHA256

    6e340e96092a63bc7155da8c95dcb8e53917a29c6b9e0e426cf45501aa4743d1

  • SHA512

    1b6871251e08eae53abf8fc2ed7bc9af1cfc4b672c9986c7962fd525d5dff266551d7e0e1d5aee9f0909e1229571b275cba13706888c1f3806a60468b598891a

  • SSDEEP

    49152:voiu/jCF/nrH1LkOVUQkqXfd+/9AqAanTmV1:voiu74/nrVgCkqXf0FPAWW

Score
7/10

Malware Config

Targets

    • Target

      GTweak.exe

    • Size

      2.0MB

    • MD5

      f39e25a531547d491058b65987601a08

    • SHA1

      2aff7da8a4b750885426410ecba9b16e10ccaa9b

    • SHA256

      6e340e96092a63bc7155da8c95dcb8e53917a29c6b9e0e426cf45501aa4743d1

    • SHA512

      1b6871251e08eae53abf8fc2ed7bc9af1cfc4b672c9986c7962fd525d5dff266551d7e0e1d5aee9f0909e1229571b275cba13706888c1f3806a60468b598891a

    • SSDEEP

      49152:voiu/jCF/nrH1LkOVUQkqXfd+/9AqAanTmV1:voiu74/nrVgCkqXf0FPAWW

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks