General
- Target gnp.scr
- Size 581KB
- Sample260702-e32x8abx7s
- SHA256 ec3c8489436f64916d43500ca3d3ec4f0690048ec9c32400fc3198cd9904456d
- MD5 d17ed16adad09ce33d0c4a6590026985
- SHA1 1d4199ad72c28ffc7553502bffa14878f4a46cb8
- SHA512 dfc4b552279d722c5df7fe95f7cd8f6d5327d4196d0f57615a76f299911ac7609e50c2ddd2fc6d69391ef45d74d8ecabc54049f5ed406350720214ce7008f36c
- SSDEEP 12288:CciZ4qN4ZkKdcLtmUzG8GIJ9EprpaiWUz1KLGS:525kkKdcLt08/9urpn7S
- TLSH T194C49E19E7E405F8E1B3E574CE838912E7777C4947B1D69F03AC69A61F232908E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gnp.scr
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
gnp.scr
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
gnp.scr
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target gnp.scr
- Size 581KB
- SHA256 ec3c8489436f64916d43500ca3d3ec4f0690048ec9c32400fc3198cd9904456d
- MD5 d17ed16adad09ce33d0c4a6590026985
- SHA1 1d4199ad72c28ffc7553502bffa14878f4a46cb8
- SHA512 dfc4b552279d722c5df7fe95f7cd8f6d5327d4196d0f57615a76f299911ac7609e50c2ddd2fc6d69391ef45d74d8ecabc54049f5ed406350720214ce7008f36c
- SSDEEP 12288:CciZ4qN4ZkKdcLtmUzG8GIJ9EprpaiWUz1KLGS:525kkKdcLt08/9urpn7S
- TLSH T194C49E19E7E405F8E1B3E574CE838912E7777C4947B1D69F03AC69A61F232908E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1