Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/05/2026, 12:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GTAIVSetupUtility.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GTAIVSetupUtility.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target GTAIVSetupUtility.exe
- Size 21.3MB
- Sample260517-pmpcasb13n
- SHA256 537ab1a32e992a0a3593fb89336be7db469b9919ecc962ebc6219e94dc4c3995
- MD5 c357c4bf93e6bfe7a57fef984529fc51
- SHA1 b9352113717db415ca564d71225dd800c064b1ed
- SHA512 7c7dc36e117cecc1487887379d40297a9c3f1d0cd1f1dab38c7c48b0317b77f7eb11fb76a2e5c0a4b12c6f97392043f62aaf9c3d98275e82abe82f8c30d06da1
- SSDEEP 393216:hKxapWfkQIoBlvvXfGHTTSOgH99vh/JVt4+zJGNsohi4a86D:94nvBlvvPGPSLNc6JGzhdavD
- TLSH T107270156E2F900E8E5BBC0B8C6575517EBB1345517309BEB52A48A692F33FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 5248 GTAIVSetupUtility.exe 5248 GTAIVSetupUtility.exe 5248 GTAIVSetupUtility.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5248 GTAIVSetupUtility.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5248 GTAIVSetupUtility.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\GTAIVSetupUtility\m-67hEvCjjHg\av_libglesv2.dll
- Size 5.2MB
- SHA256 9b203e40323b49dad29546a52b8b67d200bba8ff4cab9709a79cede23ba847d4
- MD5 11a4a07f31e4a91fff678c019b7736af
- SHA1 9912e11aa9c351be136474e0d0975e7964b1e124
- SHA512 4197cd706c7abb4782f05ba73177a018299365060c6368305b030f21733f3209545bc7d8f61968c79b24088ced4acc4eda92044821fb8347c3370bc6925a4bf1
- SSDEEP 49152:FJ2uagzq2YgAoS2tNydAOlzwn56aCqQ2iUAqC2rCnsZ1LT/Tq2XEoxEf6m8s47eF:9PTjAurCnsZ5T/lXEonmn56AL
- TLSH T104467C03F39690DEC409D2B9874B8622F776B88507257ADF229497242F77FD06B3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\GTAIVSetupUtility\m-67hEvCjjHg\libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 eb76238c9e8e41d44b5a5b18167c4c5b39ca5db4277af5dbe92d730f0fc14a7d
- MD5 e0c86bbd88d6b8f5643c1ab1c050a4ee
- SHA1 f6c72b1fd89d0f9e3d7825a0450ae0c0af092c5a
- SHA512 023a1054d7516ebb99b46ca3f9a17b1ee00e55a46356586513fdd45c42bd6ccca16139a8e93e7a9bc533afa5abed121cb5fd40474bfb27bca22da3598ebef694
- SSDEEP 49152:MG+tDvarn9O+3KVv/s0upzEpOqw8k25Pj4LneMdTaGVW:FS2be5Pp
- TLSH T1E3859E4AF2AA10E9D9BFC074C666950BE7A274050314DFEF65E08A95EF23EF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\GTAIVSetupUtility\m-67hEvCjjHg\libSkiaSharp.dll
- Size 9.0MB
- SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
- MD5 ef1fabce43fe32ca83260481253f5476
- SHA1 ad988af9826e5aacc7b8e5ed6d220b229d70060e
- SHA512 f73b56742e43b169177ff49f639c50f98a417f91175c70f7348bde1c7570c2838c181a59b628b003eb2618d75da920a449a724cccaec1dae8b9a80d5aac386f6
- SSDEEP 98304:4GKXmtfLM9j2KAdTzwlrdyc8HgGTngmY6+o/:cXmlLMvGsIaGjb
- TLSH T19B964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF46F79615
- MD5 SHA1 SHA512 SSDEEP TLSH