Overview
overview
10Static
static
10GrudgeTerm...ge.exe
windows7-x64
3GrudgeTerm...ge.exe
windows10-1703-x64
3GrudgeTerm...ge.exe
windows10-2004-x64
3GrudgeTerm...ge.exe
windows11-21h2-x64
3GrudgeTerm...df.exe
windows7-x64
1GrudgeTerm...df.exe
windows10-1703-x64
1GrudgeTerm...df.exe
windows10-2004-x64
1GrudgeTerm...df.exe
windows11-21h2-x64
1GrudgeTerm...ed.pdf
windows7-x64
1GrudgeTerm...ed.pdf
windows10-1703-x64
1GrudgeTerm...ed.pdf
windows10-2004-x64
1GrudgeTerm...ed.pdf
windows11-21h2-x64
1Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
09-07-2024 15:15
Behavioral task
behavioral1
Sample
GrudgeTerminator-main/Grudge.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
GrudgeTerminator-main/Grudge.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
GrudgeTerminator-main/Grudge.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral4
Sample
GrudgeTerminator-main/Grudge.exe
Resource
win11-20240704-en
Behavioral task
behavioral5
Sample
GrudgeTerminator-main/pdf.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
GrudgeTerminator-main/pdf.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
GrudgeTerminator-main/pdf.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral8
Sample
GrudgeTerminator-main/pdf.exe
Resource
win11-20240704-en
Behavioral task
behavioral9
Sample
GrudgeTerminator-main/pdf24_merged.pdf
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
GrudgeTerminator-main/pdf24_merged.pdf
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
GrudgeTerminator-main/pdf24_merged.pdf
Resource
win10v2004-20240708-en
Behavioral task
behavioral12
Sample
GrudgeTerminator-main/pdf24_merged.pdf
Resource
win11-20240704-en
General
-
Target
GrudgeTerminator-main/Grudge.exe
-
Size
56KB
-
MD5
a39f8bf6746c577721f489a7130968ad
-
SHA1
ef9e7c2b0395a8104394f8eba5a334daf6077965
-
SHA256
fddd4a497d22b00bc8bd7ff0a088504542e9b0c4bd3517388f7eb6bb8fd05d48
-
SHA512
e87fb58bd94df36f91fa7a0492808251d27a4b96f952ada5f2ba999b28f6e61df4190f5c5a832f19dd3711774495f66114b721e793e6bfa9cbf8ccdbd62893c5
-
SSDEEP
1536:OmtHOlUpGZRXKhn1b+Rd3paSb4/xZwzI4lcfgUNUmnSx:N4lUmXs+T3paSb4X2I4lcfsySx
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2444 1848 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\GrudgeTerminator-main\Grudge.exe"C:\Users\Admin\AppData\Local\Temp\GrudgeTerminator-main\Grudge.exe"1⤵PID:1848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1848 -s 7362⤵
- Program crash
PID:2444
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1848 -ip 18481⤵PID:1380