Overview
overview
7Static
static
3goodbyedpi...ey.zip
windows11-21h2-x64
1README-BENİ OKU.txt
windows11-21h2-x64
3licenses/L...ne.txt
windows11-21h2-x64
3licenses/L...pi.txt
windows11-21h2-x64
3licenses/L...sh.txt
windows11-21h2-x64
3licenses/L...rt.txt
windows11-21h2-x64
3service_in...ey.cmd
windows11-21h2-x64
1service_in...ne.cmd
windows11-21h2-x64
1service_in...ne.cmd
windows11-21h2-x64
1service_in...ne.cmd
windows11-21h2-x64
7service_in...ne.cmd
windows11-21h2-x64
7service_in...ne.cmd
windows11-21h2-x64
7service_in...ne.cmd
windows11-21h2-x64
7service_remove.cmd
windows11-21h2-x64
7turkey_dnsredir.cmd
windows11-21h2-x64
1turkey_dns...ne.cmd
windows11-21h2-x64
1turkey_dns...ne.cmd
windows11-21h2-x64
1turkey_dns...ne.cmd
windows11-21h2-x64
1turkey_dns...ne.cmd
windows11-21h2-x64
1turkey_dns...ne.cmd
windows11-21h2-x64
1turkey_dns...ne.cmd
windows11-21h2-x64
1x86/WinDivert.dll
windows11-21h2-x64
3x86/WinDivert32.sys
windows11-21h2-x64
1x86/WinDivert64.sys
windows11-21h2-x64
1x86/goodbyedpi.exe
windows11-21h2-x64
3x86_64/WinDivert.dll
windows11-21h2-x64
1x86_64/Win...64.sys
windows11-21h2-x64
1x86_64/goodbyedpi.exe
windows11-21h2-x64
1Analysis
- max time kernel
898s - max time network
420s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/06/2026, 04:35
Static task
static1
Behavioral task
behavioral1
Sample
goodbyedpi-0.2.3rc3-turkey.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
README-BENİ OKU.txt
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
licenses/LICENSE-getline.txt
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
licenses/LICENSE-goodbyedpi.txt
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
licenses/LICENSE-uthash.txt
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
licenses/LICENSE-windivert.txt
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
service_install_dnsredir_turkey.cmd
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
service_install_dnsredir_turkey_alternative2_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
service_install_dnsredir_turkey_alternative3_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
service_install_dnsredir_turkey_alternative4_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
service_install_dnsredir_turkey_alternative5_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
service_install_dnsredir_turkey_alternative6_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
service_install_dnsredir_turkey_alternative_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
service_remove.cmd
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
turkey_dnsredir.cmd
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
turkey_dnsredir_alternative2_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
turkey_dnsredir_alternative3_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
turkey_dnsredir_alternative4_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
turkey_dnsredir_alternative5_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
turkey_dnsredir_alternative6_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
turkey_dnsredir_alternative_superonline.cmd
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
x86/WinDivert.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
x86/WinDivert32.sys
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
x86/WinDivert64.sys
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
x86/goodbyedpi.exe
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
x86_64/WinDivert.dll
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
x86_64/WinDivert64.sys
Resource
win11-20260513-en
Behavioral task
behavioral28
Sample
x86_64/goodbyedpi.exe
Resource
win11-20260513-en
General
- Target x86_64/goodbyedpi.exe
- Size 99KB
- Sample260605-e7y25aaz6w
- SHA256 8d412b094bb9c137ff25ba9a794d1122ecc84bb776debff6c249723a13cc31cd
- MD5 afa7f66231b9cec7237e738b622c0181
- SHA1 478f336ab054623abfa691f11f12bc3be31deabe
- SHA512 a3833d6018c6ddb63c5bc5b1a2efe2f9e517e80d28d6c59661ff625d42397e484e902ae5f211fc1586a25901c1f0d1700364f604c51a536fcc467703ce76e9d8
- SSDEEP 1536:KuiGy47O/sFTEx/H6+FI87tZQkMvKghPf651Lz5e0yNgnIcm:KTGy47O/sFTExysf7PQ9KghP43VUgID
- TLSH T108A32C1AF353A4F8C51A827046AB2732AB71BC265130EF7E73ACE6701F51E605F1E664
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: LoadsDriver 1 IoCs
pid Process 680 Process not Found