General
- Target gbcheatv16.exe
- Size 4.9MB
- Sample260629-ghl3daes2y
- SHA256 910f8a21a34ab429689f8843adf1072258ef7d2782b7ebe07df12998ee4c04c3
- MD5 eeb11e74b5fb26a85b8ec357b0bf45d7
- SHA1 9716e35b5c789f857371101a300a18f62c711808
- SHA512 74deea01b1fd2ca068775a0a0f71fc3dc9f6d4313a2cc9021d2b023cf11d376eb467b50543e9d8044ea14a6949ed3567eefa8370e189340a0174f46d08133bd9
- SSDEEP 98304:mFdH2IjnyP0XF0q8gxvuFa+RUC0O7y74OKTdw2LJzi35CkvNYyTHht5XwsCH7a/h:mz2hsFaa/CX7HTdhmpPVYyTBt5Sa/A5E
- TLSH T129363358128FA548E02E75F1B042941A6679ADF16B63D30CD1BF3AE04DB7342D42A6FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gbcheatv16.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
gbcheatv16.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target gbcheatv16.exe
- Size 4.9MB
- SHA256 910f8a21a34ab429689f8843adf1072258ef7d2782b7ebe07df12998ee4c04c3
- MD5 eeb11e74b5fb26a85b8ec357b0bf45d7
- SHA1 9716e35b5c789f857371101a300a18f62c711808
- SHA512 74deea01b1fd2ca068775a0a0f71fc3dc9f6d4313a2cc9021d2b023cf11d376eb467b50543e9d8044ea14a6949ed3567eefa8370e189340a0174f46d08133bd9
- SSDEEP 98304:mFdH2IjnyP0XF0q8gxvuFa+RUC0O7y74OKTdw2LJzi35CkvNYyTHht5XwsCH7a/h:mz2hsFaa/CX7HTdhmpPVYyTBt5Sa/A5E
- TLSH T129363358128FA548E02E75F1B042941A6679ADF16B63D30CD1BF3AE04DB7342D42A6FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.