General

  • Target

    GRploits.zip

  • Size

    147.6MB

  • MD5

    39ee47d2e64311377508d03daa942076

  • SHA1

    e2e698c2c2615ffc2993c7bc4d3e68fe510ea62a

  • SHA256

    54f7ba1874552b35d0fee914d3d5541134d70854d12b65604448200f1f36f916

  • SHA512

    8d7df3ad1b03b73a5fe4155e4ea2b6c35ea6b72130a938ee66be9af731a06e45745c299b37c6754490bb4b0016002a94c9b56ff04b4397a330d4fabb1e24418b

  • SSDEEP

    3145728:KnnW6flScMWe7wb5S5Ebozc55AHtWEhl4KNEU/nLFip9dmQmW4ViMp9L5vCQGmR:wacle7K5xc45ZA2FUxip9dmW4oMp9hCA

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • GRploits.zip
    .zip
  • GRploits 1.0.6/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x64 arch:x64

    fd8d83265d1d098a7029c549d9d26673


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/CefSharp.BrowserSubprocess.Core.pdb
  • GRploits 1.0.6/CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • GRploits 1.0.6/CefSharp.BrowserSubprocess.pdb
  • GRploits 1.0.6/CefSharp.Core.Runtime.dll
    .dll windows:6 windows x64 arch:x64

    a0ee40bf96c6cc4f0b96ad521dd2ed59


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/CefSharp.Core.Runtime.pdb
  • GRploits 1.0.6/CefSharp.Core.Runtime.xml
    .js .xml polyglot
  • GRploits 1.0.6/CefSharp.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GRploits 1.0.6/CefSharp.Core.pdb
  • GRploits 1.0.6/CefSharp.Core.xml
    .js .xml polyglot
  • GRploits 1.0.6/CefSharp.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GRploits 1.0.6/CefSharp.WinForms.pdb
  • GRploits 1.0.6/CefSharp.WinForms.xml
    .xml
  • GRploits 1.0.6/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GRploits 1.0.6/CefSharp.pdb
  • GRploits 1.0.6/CefSharp.xml
    .xml
  • GRploits 1.0.6/DiscordRPC.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GRploits 1.0.6/DiscordRPC.pdb
  • GRploits 1.0.6/DiscordRPC.xml
    .xml
  • GRploits 1.0.6/GRapi.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/GRploit.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • GRploits 1.0.6/GRploit.exe.config
  • GRploits 1.0.6/GRploit.pdb
  • GRploits 1.0.6/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GRploits 1.0.6/Newtonsoft.Json.xml
    .xml
  • GRploits 1.0.6/Siticone.Desktop.UI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GRploits 1.0.6/bin/GRmonaco/.git/HEAD
  • GRploits 1.0.6/bin/GRmonaco/.git/config
  • GRploits 1.0.6/bin/GRmonaco/.git/description
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/applypatch-msg.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/commit-msg.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/fsmonitor-watchman.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/post-update.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/pre-applypatch.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/pre-commit.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/pre-merge-commit.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/pre-push.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/pre-rebase.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/pre-receive.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/prepare-commit-msg.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/hooks/update.sample
    .sh linux
  • GRploits 1.0.6/bin/GRmonaco/.git/info/exclude
  • GRploits 1.0.6/bin/GRmonaco/monaco.html
    .html .js polyglot
  • GRploits 1.0.6/bin/GRmonaco/vs/base/browser/ui/codicons/codicon/codicon.ttf
  • GRploits 1.0.6/bin/GRmonaco/vs/base/worker/workerMain.js
    .js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes.js
    .js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/base.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/Enum.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/Enums.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/Instance.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/Model.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/functions-krnl.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/functions.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/globals.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/keywords.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/libraries/Krnl.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/libraries/debug.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/libraries/math.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/libraries/table.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/libraries/task.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/modules-table.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/modules.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/params/DataModelServices.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/params/DrawingTypes.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/params/InstanceClasses.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/autocompletes/snippets.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/lua.js
    .js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/lua/snippets.js
  • GRploits 1.0.6/bin/GRmonaco/vs/basic-languages/monaco.contribution.js
    .js
  • GRploits 1.0.6/bin/GRmonaco/vs/editor/editor.main.css
  • GRploits 1.0.6/bin/GRmonaco/vs/editor/editor.main.js
    .js
  • GRploits 1.0.6/bin/GRmonaco/vs/editor/editor.main.nls.js
  • GRploits 1.0.6/bin/GRmonaco/vs/loader.js
    .js
  • GRploits 1.0.6/chrome_100_percent.pak
  • GRploits 1.0.6/chrome_200_percent.pak
  • GRploits 1.0.6/chrome_elf.dll
    .dll windows:10 windows x64 arch:x64

    810210b3b11890bee1090535e576e13f


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/debug.log
  • GRploits 1.0.6/dxcompiler.dll
    .dll windows:10 windows x64 arch:x64

    ab3093cf1cff53f421cecf4eeee429f4


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/dxil.dll
    .dll windows:10 windows x64 arch:x64

    42e0b0387affe2aaa84bcec72eb74baf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/icudtl.dat
  • GRploits 1.0.6/libEGL.dll
    .dll windows:10 windows x64 arch:x64

    9a96e9625913c28565890e319d5bf446


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/libGLESv2.dll
    .dll windows:10 windows x64 arch:x64

    8493b5852f29b95099711891808f02c6


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/libcef.dll
    .dll windows:10 windows x64 arch:x64

    983a329c063b91ba6e14a0a66af41a47


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    1dedd757946c1ca3c32f97146f7a6c25


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/locales/af.pak
  • GRploits 1.0.6/locales/am.pak
  • GRploits 1.0.6/locales/ar.pak
  • GRploits 1.0.6/locales/bg.pak
  • GRploits 1.0.6/locales/bn.pak
  • GRploits 1.0.6/locales/ca.pak
  • GRploits 1.0.6/locales/cs.pak
  • GRploits 1.0.6/locales/da.pak
  • GRploits 1.0.6/locales/de.pak
  • GRploits 1.0.6/locales/el.pak
  • GRploits 1.0.6/locales/en-GB.pak
  • GRploits 1.0.6/locales/en-US.pak
  • GRploits 1.0.6/locales/es-419.pak
  • GRploits 1.0.6/locales/es.pak
  • GRploits 1.0.6/locales/et.pak
  • GRploits 1.0.6/locales/fa.pak
  • GRploits 1.0.6/locales/fi.pak
  • GRploits 1.0.6/locales/fil.pak
  • GRploits 1.0.6/locales/fr.pak
  • GRploits 1.0.6/locales/gu.pak
  • GRploits 1.0.6/locales/he.pak
  • GRploits 1.0.6/locales/hi.pak
  • GRploits 1.0.6/locales/hr.pak
  • GRploits 1.0.6/locales/hu.pak
  • GRploits 1.0.6/locales/id.pak
  • GRploits 1.0.6/locales/it.pak
  • GRploits 1.0.6/locales/ja.pak
  • GRploits 1.0.6/locales/kn.pak
  • GRploits 1.0.6/locales/ko.pak
  • GRploits 1.0.6/locales/lt.pak
  • GRploits 1.0.6/locales/lv.pak
  • GRploits 1.0.6/locales/ml.pak
  • GRploits 1.0.6/locales/mr.pak
  • GRploits 1.0.6/locales/ms.pak
  • GRploits 1.0.6/locales/nb.pak
  • GRploits 1.0.6/locales/nl.pak
  • GRploits 1.0.6/locales/pl.pak
  • GRploits 1.0.6/locales/pt-BR.pak
  • GRploits 1.0.6/locales/pt-PT.pak
  • GRploits 1.0.6/locales/ro.pak
  • GRploits 1.0.6/locales/ru.pak
  • GRploits 1.0.6/locales/sk.pak
  • GRploits 1.0.6/locales/sl.pak
  • GRploits 1.0.6/locales/sr.pak
  • GRploits 1.0.6/locales/sv.pak
  • GRploits 1.0.6/locales/sw.pak
  • GRploits 1.0.6/locales/ta.pak
  • GRploits 1.0.6/locales/te.pak
  • GRploits 1.0.6/locales/th.pak
  • GRploits 1.0.6/locales/tr.pak
  • GRploits 1.0.6/locales/uk.pak
  • GRploits 1.0.6/locales/ur.pak
  • GRploits 1.0.6/locales/vi.pak
    .ps1
  • GRploits 1.0.6/locales/zh-CN.pak
  • GRploits 1.0.6/locales/zh-TW.pak
  • GRploits 1.0.6/moreunc.lua
    .js
  • GRploits 1.0.6/resources.pak
  • GRploits 1.0.6/snapshot_blob.bin
  • GRploits 1.0.6/v8_context_snapshot.bin
  • GRploits 1.0.6/version.txt
  • GRploits 1.0.6/vk_swiftshader.dll
    .dll windows:10 windows x64 arch:x64

    cff2e3bc77a72caa699e7cda3a0c38d8


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/vk_swiftshader_icd.json
  • GRploits 1.0.6/vulkan-1.dll
    .dll windows:10 windows x64 arch:x64

    1cca81ae4aa193b35ac4e7a2c9d50b0f


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/workspace/.tests/appendfile.txt
  • GRploits 1.0.6/workspace/.tests/getcustomasset.txt
  • GRploits 1.0.6/workspace/.tests/isfile.txt
  • GRploits 1.0.6/workspace/.tests/listfiles/test_1.txt
  • GRploits 1.0.6/workspace/.tests/listfiles/test_2.txt
  • GRploits 1.0.6/workspace/.tests/loadfile.txt
  • GRploits 1.0.6/workspace/.tests/readfile.txt
  • GRploits 1.0.6/workspace/.tests/writefile
  • GRploits 1.0.6/workspace/.tests/writefile.txt
  • GRploits 1.0.6/workspace/IY_FE.iy
  • GRploits 1.0.6/workspace/SimpleSpy/Settings.json
  • GRploits 1.0.6/workspace/TurtleSpySettings.json
  • GRploits 1.0.6/workspace/__oh_version.txt
  • GRploits 1.0.6/workspace/dex/deps_version.dat
  • GRploits 1.0.6/workspace/dex/rbx_api.dat
  • GRploits 1.0.6/workspace/dex/rbx_rmd.dat
  • GRploits 1.0.6/workspace/f42f3746fb3eb60f837d3673581c14a5-cache.lua
    .js
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/methods/environment.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/methods/string.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/methods/table.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/methods/userdata.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/modules/ClosureSpy.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/modules/ConstantScanner.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/modules/ModuleScanner.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/modules/RemoteSpy.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/modules/ScriptScanner.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/modules/UpvalueScanner.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/objects/Closure.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/objects/Constant.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/objects/LocalScript.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/objects/ModuleScript.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/objects/Remote.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/objects/Upvalue.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/ui/controls/MessageBox.lua
  • GRploits 1.0.6/workspace/hydroxide/user/Upbolt/ui/controls/TabSelector.lua
  • GRploits 1.0.6/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • GRploits 1.0.6/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections