Overview

overview

3

Static

static

3

GarticBot (2).zip

windows7-x64

1

GarticBot (2).zip

windows10-2004-x64

1

GarticBot/...ng.dll

windows7-x64

1

GarticBot/...ng.dll

windows10-2004-x64

1

GarticBot/...th.dll

windows7-x64

1

GarticBot/...th.dll

windows10-2004-x64

1

GarticBot/AForge.dll

windows7-x64

1

GarticBot/AForge.dll

windows10-2004-x64

1

GarticBot/Cloo.dll

windows7-x64

1

GarticBot/Cloo.dll

windows10-2004-x64

1

GarticBot/...s.json

windows7-x64

3

GarticBot/...s.json

windows10-2004-x64

3

GarticBot/...ot.exe

windows7-x64

1

GarticBot/...ot.exe

windows10-2004-x64

1

GarticBot/...ot.exe

windows7-x64

3

GarticBot/...ot.exe

windows10-2004-x64

1

GarticBot/...ot.pdb

windows7-x64

3

GarticBot/...ot.pdb

windows10-2004-x64

3

GarticBot/...g.json

windows7-x64

3

GarticBot/...g.json

windows10-2004-x64

3

GarticBot/...on.dll

windows7-x64

1

GarticBot/...on.dll

windows10-2004-x64

1

GarticBot/...te.dll

windows7-x64

1

GarticBot/...te.dll

windows10-2004-x64

1

GarticBot/...ot.exe

windows7-x64

1

GarticBot/...ot.exe

windows10-2004-x64

1

GarticBot/...s.json

windows7-x64

3

GarticBot/...s.json

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GarticBot (2).zip

  • Size

    2.3MB

  • Sample

    240820-b75ccs1gml

  • MD5

    7845b6e6fae67bf1b3a435827f26aef5

  • SHA1

    d6f90974035a8d58120e7a4377ae0b98edef5eb2

  • SHA256

    08e07a9533c746135608de187526fa018e931d22b1fc79f96422247fa30ff131

  • SHA512

    612da3e0956c8bb8c5d5d70f562680ec157343dbaf73c42301241cb6798b143dea8ccb47a3be8118f090fb25c4112c13c57a948d5af514cc79d7a9733a972d79

  • SSDEEP

    49152:tS3XTRN9H92rBO4ZTrQtDTsiU0QQkNqEIMLY8rHMHMMGI+vVgt:tSn7vgbRrQ+iPyqEIMUgHMbGI+vVgt

Score
3/10
discovery

Malware Config

Targets

    • Target

      GarticBot (2).zip

    • Size

      2.3MB

    • MD5

      7845b6e6fae67bf1b3a435827f26aef5

    • SHA1

      d6f90974035a8d58120e7a4377ae0b98edef5eb2

    • SHA256

      08e07a9533c746135608de187526fa018e931d22b1fc79f96422247fa30ff131

    • SHA512

      612da3e0956c8bb8c5d5d70f562680ec157343dbaf73c42301241cb6798b143dea8ccb47a3be8118f090fb25c4112c13c57a948d5af514cc79d7a9733a972d79

    • SSDEEP

      49152:tS3XTRN9H92rBO4ZTrQtDTsiU0QQkNqEIMLY8rHMHMMGI+vVgt:tSn7vgbRrQ+iPyqEIMUgHMbGI+vVgt

    Score
    1/10
    behavioral1behavioral2

    • Target

      GarticBot/AForge.Imaging.dll

    • Size

      256KB

    • MD5

      5392a22226e960d4ae7e408913c49d6c

    • SHA1

      bd498279ef2e77e4b2c828d2f88f57e7941e562a

    • SHA256

      107da9260b6d2796335b516f043b360250001feb0ae3b1c8422f90b5b9f6e282

    • SHA512

      d4b3adbd726a9216863eb7987e7eb03ebae134113bfccd5b62609d076e0c50738c7ec3a1a2f308360cc42a30e5ecd0731851179baa1eac4dec5f6559940ccfde

    • SSDEEP

      6144:trzIhAD6BgD6Ve58PzbA82aoviVwjBKFel/y:tAhAD6In8PzbA82+VIBK2

    Score
    1/10
    behavioral3behavioral4

    • Target

      GarticBot/AForge.Math.dll

    • Size

      66KB

    • MD5

      c69973f674d9d113411d0fa2d1dbe222

    • SHA1

      144bfc8c0ee91956dd555940d77360f303db2a7b

    • SHA256

      a4f24c9a46705c66ff7838c3a4c61759f5ba58ee8a5b061d05340c61d790c0b7

    • SHA512

      725b9c7113431b34754787dbf15b4c1fb2299e59efad35766e22a13e665bb7e376831be36d5a1664399823bf124af18d41b861956c18deea7bb68fde95b789ba

    • SSDEEP

      1536:iLL/6wbnySdx6MpTQYf7A8TQvudlmmy+OIa:0n/dRnAUlby+da

    Score
    1/10
    behavioral5behavioral6

    • Target

      GarticBot/AForge.dll

    • Size

      17KB

    • MD5

      02c63f568e598aad85dd401d7b26e82a

    • SHA1

      2da9ec7612835e1f69d4a93aa2d49ec9bdff7f7c

    • SHA256

      966a474060a8aca70c73ba09d0b6fe2353035961c7107b9003ef879c010ff8da

    • SHA512

      da9bff86be8fa890dda80a35ee6c851aa655f087f81804a23c73f8c586b7e13ac5a643e0a516a35787cd97b392aec16bfb95210080e4e53e6144fec9316acdb1

    • SSDEEP

      384:aJtTjIFgPn1Q11umcaOxIapDtoTFC6dmoU:KRcFKoumc9ICDyxmoU

    Score
    1/10
    behavioral7behavioral8

    • Target

      GarticBot/Cloo.dll

    • Size

      85KB

    • MD5

      f88bc7da2a3fa4c39c51111db3392236

    • SHA1

      e67a856cf4dc5905c2a258c9ef44892caeef5337

    • SHA256

      39bb9d25fc0645e6caaa64dfa1dc14635f3274e0d3252d8c490a485402cd0e5b

    • SHA512

      48a800b21833626a417760d66d7f1ce39c15ceae92f2dd112cb72f329974bb2ff9f0514f5791d352fbbd9a74c9027b471c755d5b938bfad1a0ff5ab45fb49286

    • SSDEEP

      1536:OLvImi3xLKETrun8L7IO8zbXSBOmwMcnUF/jA82IOjWXnBS:OLzi3h1r4ddzbCBOmjSUxqIOjW3BS

    Score
    1/10
    behavioral10behavioral9

    • Target

      GarticBot/GarticBot.deps.json

    • Size

      4KB

    • MD5

      70ce4724db7f3ba7558e9a0b10008b7e

    • SHA1

      6a54d5033cb13072cdc0e795ce6def0621f3c2a8

    • SHA256

      41787c16ec95482018711d9c7dc606108ecd75f9d1bee9388e8898ad0613ae98

    • SHA512

      e78317e086d87df9b280a136ec157df6ea6f1496153daeb33836b6f80a343174cf2dc1e37381cac0e9fc44344cc8a43fbe250c5d876db68cbba42830cd1576f7

    • SSDEEP

      96:YxyepFrOH5WAytVwtlFuM+o0mMM27HLcQkwRANKfdnQq:YkeCnFESYB

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      GarticBot/GarticBot.dll

    • Size

      1.9MB

    • MD5

      999907b2ea208c194819d8cc076adb93

    • SHA1

      511bbb87135af9752ff3534429c3ece19263c5d9

    • SHA256

      13a191bd63490593fcebe181ae5f9fbdef5118155c469f12f15893146e994fb0

    • SHA512

      3f1232f3a1079ee485f5d22bc9a15427af17b091da7c49683bf873493dc4c2178b3977191357067927c466d396eda836a82b3eaf27928489225a99b156c3b3da

    • SSDEEP

      49152:CI85LqPhBDYoyoSaoh+ywWEUOhkywWEU:n1PjEqSaoh+ywWEUOhkywWEU

    Score
    1/10
    behavioral13behavioral14

    • Target

      GarticBot/GarticBot.exe

    • Size

      409KB

    • MD5

      dd47a02229a1503ac5416052ebbb4dd8

    • SHA1

      f5ca83bab956e83e7d62b274c125ddc96f77a754

    • SHA256

      1835d736ddc64b06ef16006dd153984fb734bcd9562f2b2a40297c14fede1c1c

    • SHA512

      8a06c4314e4932640c76aa780082a7e1da8f928c625fd88fc28920183d09d343866300d7a07c62f0711b53ea9ca51d8c9e974e745283974213eca437822affd6

    • SSDEEP

      6144:1+oAJEJcy0owirZZEx1Vvu4sqWeQDkpAXtPlHLOL8CcJ20RmZQ33b:1vDwogV6qrQwpM9lHa4jwZQH

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      GarticBot/GarticBot.pdb

    • Size

      23KB

    • MD5

      1506d98bcbf9beb9a6d4790069034616

    • SHA1

      c090802bb4e3e0b6c5dd6c1efe42b1fb5576ed97

    • SHA256

      386294213471433dd4c0c982bc95d04dd31267968886a8b5e82ce8f02480515b

    • SHA512

      30d02f49650d6106c73f24a0f7b1ff7d6fd1f2ec4640e65b1e36684a8f214e8a0929d9bf332bd0f0f222631acfe81637e1d69140d6d4ed44a39fee3fe84ff0ae

    • SSDEEP

      384:OAer0jcNbGOWYvaFL10FvXgzTJ3A5qe7t4dC7LO15HM7HJfcs0ENhwSMXBI7R+I3:Rer0jACl3ARQC7LOz7SMMo/AFKA

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      GarticBot/GarticBot.runtimeconfig.json

    • Size

      399B

    • MD5

      46223224e9bd5979d895a973623b3daf

    • SHA1

      3b541f318adee871a41a4ede7d92f41d38bc59f3

    • SHA256

      3b9a7cb4a8eb2d720dd41a424468e8cc3cb087fe0e5fd228cef2109ba8c695ae

    • SHA512

      384eed1249fad903b56592592bfb6b6135cff28845272b34d2017114d78ef5f3a3613586498730874f0c640dbc1843b47baeb187988902d79e73963b514ad563

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      GarticBot/Newtonsoft.Json.dll

    • Size

      679KB

    • MD5

      916d32b899f1bc23b209648d007b99fd

    • SHA1

      e3673d05d46f29e68241d4536bddf18cdd0a913d

    • SHA256

      72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661

    • SHA512

      60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6

    • SSDEEP

      12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty

    Score
    1/10
    behavioral21behavioral22

    • Target

      GarticBot/OpenCLTemplate.dll

    • Size

      662KB

    • MD5

      00c3b785974fcaf969640cb1b231f6e8

    • SHA1

      e7e9c465bee86f2579dd34e1354a006ff37f5bde

    • SHA256

      75997b48e2b0146ea19f3b1e8cf6254131eb78156538abb3d349a0537f285748

    • SHA512

      a88848b641a860de70d24f9883982ca155ae0fcde663e73a36e8ccc441be493b2ba8f1b87690c956ec0ec1355e50a36a5866b2dc42ba0740224f399474b08fe8

    • SSDEEP

      6144:/CEA2acLEhUIZ73+7dlh7SvmwQ+j+ocn+xXDgalUQ8Ufx0kw4JeSkgihJWqKu7pF:FacLEhHd+7dlh7rwJxUasnn

    Score
    1/10
    behavioral23behavioral24

    • Target

      GarticBot/ref/GarticBot.dll

    • Size

      274KB

    • MD5

      b3520be3d21a81c6b14457da67d36eb5

    • SHA1

      8284e05ab0b6680045dba3bd9ec046ce707ce143

    • SHA256

      7cf9ef7af38b54acdd250aae4f6579ee4f858b5d058399dbf80af3b8010666b5

    • SHA512

      7bf8c189796e6805ccc5cc3861745f02bdd7a3d07918a0fba04cf9f4e85c1d77d364f329d12893552c3ce71deaf0cb34e6ca109243d4227e5ebd5850fb243826

    • SSDEEP

      6144:iwVvu4sqWeQDkpAXtPlHLOL8CcJ20RmZQ33b:hV6qrQwpM9lHa4jwZQH

    Score
    1/10
    behavioral25behavioral26

    • Target

      GarticBot/settings.json

    • Size

      216B

    • MD5

      f9de1ad23f852b2a98c4477cb58f7c6c

    • SHA1

      f02f82acd16b4509b04e90f69370979044914cc9

    • SHA256

      064908fcde4d3d21d567bfc39d73cf5ed7266b6d9cbd1b17eaadcd097ecc7d43

    • SHA512

      fc6a1b699cb6a40560ba844b1e3fedc6f689a2fc5b6e5f96ff0d0c659c393582ca7b35fcb402e7a53718dff18fd5c182c123e01ff8c4fe3c9af0b9276b3155db

    Score
    3/10
    discovery
    behavioral27behavioral28

MITRE ATT&CK Enterprise v15

Tasks