General
- Target ShibaGT_Genesis_Cracked_V6.5.exe
- Size 17.8MB
- Sample240617-xc4cgateql
- SHA256 f98b901ee7f72765c971ad03184c32617670a2a305ff4fa452f51b52f040b770
- MD5 08a85ab860eb0a1049e7326dc93b4976
- SHA1 af47fdcb0672c1d2c65c96eb2e423afa13cf8690
- SHA512 fe421e50d2b63693417a7b8219fc880c1475225643de14dd5b67f86115cdd126c354afdb480aa0cd7cfaaf25d958ca64d6ca07b4f93732a97b9c4402bf6bc0a5
- SSDEEP 393216:LqPnLFXlrPmQ8DOETgsvfGDgPxMZvEcSZK0EXGq:ePLFXNOQhEWapbKr
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
ShibaGT_Genesis_Cracked_V6.5.exe
Resource
win10v2004-20240508-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
main.pyc
Resource
win10v2004-20240508-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target ShibaGT_Genesis_Cracked_V6.5.exe
- Size 17.8MB
- SHA256 f98b901ee7f72765c971ad03184c32617670a2a305ff4fa452f51b52f040b770
- MD5 08a85ab860eb0a1049e7326dc93b4976
- SHA1 af47fdcb0672c1d2c65c96eb2e423afa13cf8690
- SHA512 fe421e50d2b63693417a7b8219fc880c1475225643de14dd5b67f86115cdd126c354afdb480aa0cd7cfaaf25d958ca64d6ca07b4f93732a97b9c4402bf6bc0a5
- SSDEEP 393216:LqPnLFXlrPmQ8DOETgsvfGDgPxMZvEcSZK0EXGq:ePLFXNOQhEWapbKr
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target main.pyc
- Size 7KB
- SHA256 2d3fb207bb0e938ed722c403b4956dcbfe33e9f6afdd7afef8ad07d22f9a312d
- MD5 157001febb57f0741e4c47f676f3f9e0
- SHA1 c4fdae3617265b884568a257bcb7d451e53311ae
- SHA512 0c0994f4aa8954fb15d6c0dab544bcdeb5139465aa839b0fea63a46a4f7182cf16b2ccf5dc1f728b2c129b61b947cee0e3a0900942d6a607d774449b36740c7b
- SSDEEP 192:wvp9VeD8B2+WdXwWlVuOi63UPJhwA2DMdwpXnw:CV5lWuWy6c2AKPBw
- MD5 SHA1 SHA512 SSDEEP
Score3/10