General

  • Target

    GTProxy-v2.0-win64.zip

  • Size

    1.5MB

  • MD5

    681fa6a404132e27210098e9855aec19

  • SHA1

    937907017e100cd7c632511f81d689a5035acd6a

  • SHA256

    c5aa3e115d8164ceeafc7d358fa7784c87a6fa5011a80bd8892525ddc0b50e9b

  • SHA512

    e70d81be7750f825af07a44dfc3d93f709ea6ec05493b1220ea9d5dd86863d5e3afcc1d1a77d322225cc686c358be5407deb6743dd0fa4134cef4261d954c953

  • SSDEEP

    24576:Bhg2Fe3SsjJRhTDhijld4L1sbGJwEI7aPR7+EzqqGpabNns5c4d5E+betcsRXZ:bhFiRvTDhiRWxs6Jk+lVqnpa2FycsD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GTProxy-v2.0-win64.zip
    .zip
  • Proxy.exe
    .exe windows:6 windows x64 arch:x64

    d98822734abd8505a6ba2e8d94e1d733


    Headers

    Imports

    Sections

  • config.json
  • resources/cert.pem
  • resources/key.pem