Resubmissions

28/03/2025, 09:56

250328-lybnsswnz8 3

28/03/2025, 09:55

250328-lxrcvst1fz 3

General

  • Target

    GTAC-Server-Win64-1.7.0.zip

  • Size

    9.0MB

  • MD5

    389efb88294264b0897a20c7b83ed565

  • SHA1

    c73d1882d1a050f781724c44f3573f34a9be2acd

  • SHA256

    6fc60098366fcadc7f08df3746881742f1fb30a91e2047b7b14951a6861dc214

  • SHA512

    c4b4e95f62ca1a90cc0054f432a37b3f966da4cc21b1b0901b33d7771f1198465ff4eed792534dfb4051769297cd9bcb2dc23a2c5ee2018d4eb54edd4e8b95e8

  • SSDEEP

    196608:wJU+Dhy0woxL0PnTcQTUZMIEWFuRolrHVspjeM8msRyodhEP6fR9j/O:2TDwbbc83mDJTmsfdW6fR9DO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • GTAC-Server-Win64-1.7.0.zip
    .zip
  • Server.exe
    .exe windows:6 windows x64 arch:x64

    dc9a42555006f7eae46722491a0a6bca


    Headers

    Imports

    Sections

  • mozjs-60_x64.dll
    .dll windows:6 windows x64 arch:x64

    6ef6028950e623bad34b2bf337cab864


    Headers

    Imports

    Exports

    Sections

  • nspr4_x64.dll
    .dll windows:6 windows x64 arch:x64

    a83af3e9f9514c8b282f5c0f12f4035a


    Headers

    Imports

    Exports

    Sections

  • resources/freeroam/meta.xml
  • resources/freeroam/server.js
    .js
  • server.xml