Overview
overview
3Static
static
3GTAC-Serve....0.zip
windows7-x64
1GTAC-Serve....0.zip
windows10-2004-x64
1Server.exe
windows7-x64
1Server.exe
windows10-2004-x64
1mozjs-60_x64.dll
windows7-x64
1mozjs-60_x64.dll
windows10-2004-x64
1nspr4_x64.dll
windows7-x64
1nspr4_x64.dll
windows10-2004-x64
1resources/...ta.xml
windows7-x64
3resources/...ta.xml
windows10-2004-x64
1resources/...ver.js
windows7-x64
3resources/...ver.js
windows10-2004-x64
3server.xml
windows7-x64
3server.xml
windows10-2004-x64
1Analysis
-
max time kernel
103s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
28/03/2025, 09:55
Static task
static1
Behavioral task
behavioral1
Sample
GTAC-Server-Win64-1.7.0.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
GTAC-Server-Win64-1.7.0.zip
Resource
win10v2004-20250313-en
Behavioral task
behavioral3
Sample
Server.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Server.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
mozjs-60_x64.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
mozjs-60_x64.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral7
Sample
nspr4_x64.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
nspr4_x64.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral9
Sample
resources/freeroam/meta.xml
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
resources/freeroam/meta.xml
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
resources/freeroam/server.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
resources/freeroam/server.js
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
server.xml
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
server.xml
Resource
win10v2004-20250314-en
General
-
Target
resources/freeroam/meta.xml
-
Size
154B
-
MD5
c48e3b6f06707b8cf45c8a9947afd43e
-
SHA1
0595df5c9b6ab7de8ad62eb51b8f14b4e6ade7f3
-
SHA256
1e8c0c7de3a5248a737c21747b91aed731b9ac5e63be95a85093d550570af7ed
-
SHA512
f761aa7c4c112bf67f8f4e6c0acf058c7b2384307b65e4598ff33de3145664f874cea6619a6f7d996c9c752d7fba7584bf7bb70c3c7ab22d361418388410ec87
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\resources\freeroam\meta.xml"1⤵PID:3208