General

  • Target

    gcbm_setup.exe

  • Size

    3.8MB

  • Sample

    240912-gfkfrstfra

  • MD5

    45010fc87dc34b378ac01aa881a58c05

  • SHA1

    0efeb94d99c0f22957d602175a035081ccd64472

  • SHA256

    4c62fe96ea739250ba7b65abf87d6659a04151d430bd915b4e87ea5cc6d93fa3

  • SHA512

    355aa3668c8052fa1ae7a6077ae0b07bcfa44bb6746e1629993226e59180e49b9a0d1ce4a076c0c618859e5b2010f6cc8af5cd3795b25f4be44be80313d66979

  • SSDEEP

    98304:RkLaiOnGUekK5tlDooWeLHOYb1TdBKjbtrw74:CukkUHxLLHOyTfKz

Score
7/10

Malware Config

Targets

    • Target

      gcbm_setup.exe

    • Size

      3.8MB

    • MD5

      45010fc87dc34b378ac01aa881a58c05

    • SHA1

      0efeb94d99c0f22957d602175a035081ccd64472

    • SHA256

      4c62fe96ea739250ba7b65abf87d6659a04151d430bd915b4e87ea5cc6d93fa3

    • SHA512

      355aa3668c8052fa1ae7a6077ae0b07bcfa44bb6746e1629993226e59180e49b9a0d1ce4a076c0c618859e5b2010f6cc8af5cd3795b25f4be44be80313d66979

    • SSDEEP

      98304:RkLaiOnGUekK5tlDooWeLHOYb1TdBKjbtrw74:CukkUHxLLHOyTfKz

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks