12b8d61850dc9ab05c0a4b164742617e18e877929eaa0ff8e4572e3b9fce2f74

Sharing

Copy URL Twitter E-mail

General

Target
WormgptWindowsEdition.zip
Size 381KB
Sample260711-281zfaa18k
SHA256 12b8d61850dc9ab05c0a4b164742617e18e877929eaa0ff8e4572e3b9fce2f74
MD5 003321d0c5ed9c3a9e7a41ba39f81c58
SHA1 dccddccaf85118f56b5a532f3745ad793e2ad46a
SHA512 c234fda74bddc605a1976016b073f4b6e12bdb2b8295e26341ec33ea9e59c0ac61ac0d5088ad8caadd81914736bbfb22d70d1d8726910fd86f18743740808257
SSDEEP 6144:28adEP14R64iUdz5rcsaSvpNycoGI/qWXgNe/TpTELSyy8OVnN0/EwIrTMb+I/a6:E62R6dIz5aShOGkwNeSLSylO3MENob+I
TLSH
T1398401794F3A8CA5D64BF430DBFC9347D4A7B982D486EA47383012D09B9E1023AB6F55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  WormgptWindowsEdition.zip
- Size 381KB
- SHA256 12b8d61850dc9ab05c0a4b164742617e18e877929eaa0ff8e4572e3b9fce2f74
- MD5 003321d0c5ed9c3a9e7a41ba39f81c58
- SHA1 dccddccaf85118f56b5a532f3745ad793e2ad46a
- SHA512 c234fda74bddc605a1976016b073f4b6e12bdb2b8295e26341ec33ea9e59c0ac61ac0d5088ad8caadd81914736bbfb22d70d1d8726910fd86f18743740808257
- SSDEEP 6144:28adEP14R64iUdz5rcsaSvpNycoGI/qWXgNe/TpTELSyy8OVnN0/EwIrTMb+I/a6:E62R6dIz5aShOGkwNeSLSylO3MENob+I
- TLSH
  T1398401794F3A8CA5D64BF430DBFC9347D4A7B982D486EA47383012D09B9E1023AB6F55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  wormgpt_enhanced/README.md
- Size 2KB
- SHA256 8f10e8c57bf18d65ff712420883d3d8cca34d7ec1e51f7eb1a42ee1930540890
- MD5 c8d730f0fb72a005737d4851362f9ff9
- SHA1 eeebd96a188f69ea6eecddacc4f1b46c32cfd60c
- SHA512 c64d8a1e55f02094d4e7498314b2f5c3e75098c35ea0d8aaaa060cb726f6304a7ae6cf6f46c5958c532daa8064f7bfe78bddb73a2dbc78e990fe17bd6cc6c857
- TLSH
  T11651A5AB0EB5013C37F3C1CB9242EEE6E6923060655509ACF8EDA47913C9B9B157D380
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2
- Target
  wormgpt_enhanced/app/README.md
- Size 2KB
- SHA256 f58b5b17f83db63c09a9f2c059ec435ac8a3feb66f9337391ed5f3f62cff4e63
- MD5 cac141da861c855e069a9c32557458ac
- SHA1 ae5c241128516b0e8a17bb40fa474223e262c03e
- SHA512 6feb4264d29da403e419d5b0a5f8f6aacf352f1f82ca9fa21827a49830507bfb6bbbce19d7ed27e1d501a5509cd09f600534ec4d33c94412f65aaf1e1bd1cb95
- TLSH
  T10B511213018D1DC65EA2199FEF552483A82D53CF6D4AE862F0BEC2245F0E1BC527B754
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3
- Target
  wormgpt_enhanced/app/components.json
- Size 461B
- SHA256 22643b642f17cd817ec94d8439a272dac28119af0aebf8219a96ac1c2f4c61dd
- MD5 8df57b256ec5ade8f4832fd28cf7bdd4
- SHA1 3d2a7bc5ec6892d9d7c4edf5990da099fb4ff3bc
- SHA512 405dc8037730670e1485d6b7e0ced00d6fc47f4eea1eed70331397678dfa9518767bb66dbf62a3d6b068f1cbc6ab241de9e7493959488e8e0212c110ae79be11
- TLSH
  T1E4F05C7EC0244D3316D0A418557A350398AD9C470D487C2CB3D7511D1F5D1AF50773DC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4
- Target
  wormgpt_enhanced/app/eslint.config.js
- Size 616B
- SHA256 4efe97b16d1200fac0eaf07aa00930a8668b1f96a0be1891ace8c1e712ff0ccb
- MD5 b8893da386a89dfd3672dad848f4ec7e
- SHA1 3116d59387be2d09c009a58063e5ea17c4165148
- SHA512 506e7ea65a0e76f361491880cded46b2f429bd7f1a4780f9013c9250ce052dff5b97a9db5827ae87d8ad6ea822085554a72174f6859081d526de5bcc1518456f
- TLSH
  T13BF04C47615F54911A9258EFCD1A3A835AB8538B2D5E7861F1FFA7301F4C29C21B4344
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5
- Target
  wormgpt_enhanced/app/index.html
- Size 294B
- SHA256 0d677327c2a0b36757a3fde33d9e3c7aaeffcc24ceeaf77bde750ec2e4d964d1
- MD5 7b78e9c2d4d78d1ef248e9673bb6716f
- SHA1 ba9195624126dc0da187cec1f137ff24630b3a46
- SHA512 bf7a2b1954f4f43929d96367a2082d51caaacc28f71726b8846cb340688d1b41217cc9db64df81aa4485020dd50a5f2524e66df1ab7fc2df99afc729356acf6c
- TLSH
  T153E02B82C4F18909926445282ED0F60C1E89D6C7A3C56D483BCEA0B65FC5791CDDB2AC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6
- Target
  wormgpt_enhanced/app/info.md
- Size 1KB
- SHA256 9c99671a0fe27f9c0e575560c886ae290651b8833b8e30d70a50d27c3e55209f
- MD5 ccec28d1872c030a426392bf27e80bca
- SHA1 17b2c020367e7229be9bc0b472fcd7e62be24c82
- SHA512 1acbb2d0bab4ac6ac9c0a58492f250e31154a189c5cba538b4d0123473c74e6921ac0ae3a1bf3574f598132ef0a4410b535495eced27961774933f37900c33f0
- TLSH
  T1EB213313C02C133A0B9005A9F7ED05529F960BD4D75B6E1575BE83A81B8D244FD7EECA
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7
- Target
  wormgpt_enhanced/app/package-lock.json
- Size 294KB
- SHA256 4c0abd692ba0b5f5fd9384470988aca436b6f0e188f999c82e6c4ab65c173a72
- MD5 dc2b0dc97d80e33849fb69bf5d994b01
- SHA1 2a9948f8c4b9785675a31ccc7033c6e0c9cedff7
- SHA512 1a31267fe20b036901dbaca1f70453da16b74acfc8bbbda9ee4e392bbf5ec6c994d6c7c418d25d513de241dfc3f0b82a6cbaffe8703ec41713c2e70be5be14a4
- SSDEEP 6144:Crd1wvxDGkyDkJeImukezDaoWs/2XBckz+Q05mW+9l8Bd965hyIYBbbweONmGu/Q:OEVGkyDkJeImukezDaoWs/2XBckz+Q0O
- TLSH
  T10E542204CD346CF3169A6AA8D8AA10437429405B1C99BD1937FC47AC8F6DBEF30B979D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral8
- Target
  wormgpt_enhanced/app/package.json
- Size 2KB
- SHA256 a94ea032521b8bbb849099510fd5d47621fb23b9a02f1074b71b2be8f538ad64
- MD5 c9215cff14879a688d96945fe797f8e3
- SHA1 c48140af8cba2376e1fb1946251bde3d6c70933f
- SHA512 b55d671080e8a43ea0118c0c7bb8f7cae86d649456a47c46df8d52428461838f313ee20d6736e6bc3caf27d7ff84f87acf5d9df5b869299d4b33c68cf3c7c4de
- TLSH
  T14F51C21CCE44ECE7AD92019D96AA0066A81C641F4DBAF04873A2830D4F7C6EF7174E9E
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral9
- Target
  wormgpt_enhanced/app/postcss.config.js
- Size 80B
- SHA256 190c877db466995bf1482f4a16abd06e04a89ede3119341e2a86ff96e1737b27
- MD5 ef3ba2a81ba19f8ea5ddf625521e96f0
- SHA1 211016771cee108602ec598738d916b332ee0f02
- SHA512 bed3818cc511a0161039ed2595a06c856101a64a5aa7dad9466f91b6666f3829b5c50d0c93e8c6d8ec1aa181fbf1b2784746242bec87b144525ec13b141b2642
- TLSH
  T1B2A02403407C755350D0000317D0401150DD4FF33C0D3CC173C005145F0D11F0035300
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10
- Target
  wormgpt_enhanced/app/public/futuristic-building.jpg
- Size 103KB
- SHA256 53b680b5a87396e0264633fcba6ea7aea7e171c3415fc7645911c9e2a77e38f2
- MD5 61ce8a9bc528ab35d636f7e0c049d132
- SHA1 21f9860a7eb8264434bbdfe074b530c5b772218b
- SHA512 0c25125c2182150e0f23357ae00d5652ce87e5a409e4e713be5042787bfcb93bfb13b8b6c981b0ac2ee63f93fdec97c45849519c7bc1d0b024324f6061c671d1
- SSDEEP 3072:bDl3iJnF6pDFCvoMZcyyXj6QICCSNz195i7hgJ:bp3iJnF6pRyo1Ue4o
- TLSH
  T1C1A3E1034C159742C5396FFABE072F7C2B4A265CE4963AE61962CF9B7C30571AC5E42C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  wormgpt_enhanced/app/public/user-avatar.jpg
- Size 61KB
- SHA256 18523b0f8a1af0721c13295bd521292f912cbb30e1495bf62636c1ca30233d57
- MD5 a6883fc8a7ae9415f400d152be20053e
- SHA1 7de7ab57e8c6e815af7a481a6bd9e818b271f372
- SHA512 fb2f8bd2a3bf60da66b8bcb47b1adad07cb1b2f0c9aa7d0c965650dc2eb9111a4c0fd6cb4494be55afad66181d9e7a0194febbb5e8e7ab04b5f03207610c18cb
- SSDEEP 1536:2nbY+aMZL4x2EIowotsgOEfNmicJ6Cbr0hm4YiEqbMunrbu4vIm:t3gi2U8vE1h0bb2VEajnrbP5
- TLSH
  T19453023FA131DCAAAF4643627D0997EB818724F095682DFC780C8ACB5C156B07DAD19A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  wormgpt_enhanced/app/public/wormgpt-logo.jpg
- Size 65KB
- SHA256 29fa2164f3e90d52cafd49eec389670903664a6187d35c7b4be6d67c7d1b5e89
- MD5 e8d0eed1690356a20ae2cfaac1764a07
- SHA1 2de22c8a7508602ff67119bbd3bf5d68b236978f
- SHA512 ca462e99570651374d57e698dffc29edf28c162df59e0226583f9c5480b07a3ac5e52a104ab3c992d3b73c0d0e023c3e101c9269a4000abe041f7a37f8d6052e
- SSDEEP 1536:Z5M5zhi4Y+e9KRDBMmJAMnXzXmf7jDukz:oZhA9KrBnXzmfnL
- TLSH
  T1F163F7038C088B93A01987E8BE171DA96F5A275CE9D37AFF10171ECB7A503765C5E02D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  wormgpt_enhanced/app/src/App.css
- Size 5KB
- SHA256 7f866eb06b8c21f7f591454109f3190f366e7ab26e8f64c6191b113d9c02df65
- MD5 58924e6540e8199a759fd88980d0a5c7
- SHA1 a1f7f22b8eb100e8deabb1c89666cd58c81bc0a6
- SHA512 ad788b37b5c1a03d3d644ca6b07cebaaa669013bca5e5eef6c025a12bdba0f031558c53333d702110b5420330566d0761a35bf6ba75dcc54f7d3eb5de800c9c7
- SSDEEP 96:zmhog63QG1uxcwrFuZB1dwM1PX1jJp/TJN1+169/B35y:cP63QG1uTrgBHwM1PX9z/TJN1zo
- TLSH
  T1B1C196E461D5D404B1ABC0ADA5C7DE1573BE9047E10AACBDB3E6204D9F671EC826B3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral14
- Target
  wormgpt_enhanced/app/src/App.tsx
- Size 114KB
- SHA256 f1373d24ef9524a65ca6b735d309b76c8e890b4b31f94afccb429a1a51460d1e
- MD5 b9c96017437a5e9329f0cd5dcc84d991
- SHA1 56f1207be6ba153f353e3feeef3de29802c18fc0
- SHA512 7dc8a6fda149bf5e77af0c107b1c300c2f8fb0d5ca099a41e36a251a9fb92a5430d26f6c62f245458852979ea35d974938e227e60d751ef4b59eb5d47bdab750
- SSDEEP 768:hl1LmN2fCvybTHtYxHOUsI3tkETU2bOFrnSsQvaaxbb+CVkr/s6Bc3FpNW+R4fuW:hlG2fTYxC2cSUr8kr924cKvmYq4n5
- TLSH
  T1D3B353B031F01D3D3183C17F6E6A9416A928B557FB5BD9A5F26C72802FCE4418DE62B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15
- Target
  wormgpt_enhanced/app/src/components/ui/accordion.tsx
- Size 1KB
- SHA256 1e00288c7eee72380002164ea3ff7589df5d92f2f1b8c7aa5077596ef680acdb
- MD5 581b83215a419af526e5447e6d01fcdb
- SHA1 9c97d0804eaced3bcf8a58df00707c0264a03e39
- SHA512 f5140ba713d72ed64a2bae56bbaf52312107231d8ee6783a6050fff85eb2b9248abbd47124a402bd70a2dc88427d861aca264fd2ee9c777224de8677cb388ab2
- TLSH
  T13141F05022AD1460280BD460E76DEC9C5A7C206FFD6E3468F2FE30943FC9428DCE1897
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral16
- Target
  wormgpt_enhanced/app/src/components/ui/alert-dialog.tsx
- Size 3KB
- SHA256 683cf8b6c3b0c29fb0e31f36e8c7794c63ab5b7ab431f7441ea2d478bbf9fe41
- MD5 815fc512f7d24dfa437dee6622e027f7
- SHA1 610d30b5743a8f367b4f9d944830d12625c56fdf
- SHA512 cc8d9e0ee7eb88842b209b0f8af8239b39b5134ab5922fe54bf073d080abec14d1114b7460ff9202d9d02029a92b6c62f182456ccad235432c2e420f823799f8
- TLSH
  T16B819B9271AE6C182F874CB0A72F28DEF5EC405F92896558FAFD31D41F550AC64BA843
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17
- Target
  wormgpt_enhanced/app/src/components/ui/alert.tsx
- Size 1KB
- SHA256 49d8311589b810b106aada8ef7b13f70b2b1f68cfce4e1458b7f31a191f420e9
- MD5 8e59179ed2f0f6e33320d0081b9782fa
- SHA1 1440ff785cca3f821881c33d1ad7a23cefb7dc67
- SHA512 730bdfc2d0f1d20a96495207ddb3815f91e03660025675185eb4e489216fc56801ca22852b437d907d2fdbeb8291b0a65cb885f8e0738b6399f527385557f4fe
- TLSH
  T1DC310041F5B3ECA8374711799E3FB16A20BC520B9B4ABD59FBFD23E84F0919988A1400
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral18
- Target
  wormgpt_enhanced/app/src/components/ui/aspect-ratio.tsx
- Size 280B
- SHA256 6a75117416aa89200cf31e8d61643b428e812f479caea857c80004b26d893e79
- MD5 be7a9b030095db724fb3d9ca4e62293c
- SHA1 524849a3efda11100acb350117d579049cfbb2f5
- SHA512 c5ebb9a7fa786435fbbf27d81d0205cf7b6f5bde74d950360599a9dde9f78b32d457b3cc233df3d9981bdeaeba61d0c2eae8ad05fa8fea093638c6c52ebd9775
- TLSH
  T1FFD02BA62157B06C4C26AEC7F10B905455B8D0FD5759005E620918F2D672CDCFF93897
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19
- Target
  wormgpt_enhanced/app/src/components/ui/avatar.tsx
- Size 1KB
- SHA256 e637ab3522c01631eac2e456588ef301314e2bb7940ebf7cd96e698a868d47bc
- MD5 a94ddb60cff346499b10e164b2db790d
- SHA1 2af7d9aa54d726ab674d69181c838bf52487ee60
- SHA512 d7af1d96221e1d08de5f2d0c1b436b7c322b7b70b4257f46885a3752be0f7f5a2357489f8b21122fd85508c7f466e5a894e357f9d9432628203ba739bafb9a71
- TLSH
  T1B811AA46607B54A91C1341A2E22FF28D64F8515F4BA82218F6FE71E01F841DC34E1823
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral20
- Target
  wormgpt_enhanced/app/src/components/ui/badge.tsx
- Size 1KB
- SHA256 e7455feb113b38c59456ba29a9ec264b5ffa1daae8883866332ad637ffd57c31
- MD5 7efa8abd36eee59f14998b447d169304
- SHA1 d60f760cde7052b664cfeaf3eec542e053819e9b
- SHA512 f031690336400d639a9789134753831f8e68337f5f1341011b2175c0d6a8f88d2d00fee2ed2a0540c60d3b25558ea212103aa6e233e60991519dd8d78978f0d2
- TLSH
  T192314201F1B070E81297486C71ACB4A5D28CD9DAEB0B3CA3F5EC23B42FAA16586B0584
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral21
- Target
  wormgpt_enhanced/app/src/components/ui/breadcrumb.tsx
- Size 2KB
- SHA256 22f3f4c13ed1085c4131379bfccc6fb173a474f861636bc2736506820153aa08
- MD5 14763038175abd2410d97d8166c89480
- SHA1 69da058532bed842cab2112d86e783bb0aefd0b1
- SHA512 e27d089596176cdb09fe9816373a35bcb44f46f37b0f6dafe2dfe1b16790faad5879d20e36b95aef389f2950a656b3527060a4cc1fd3bd401dd290f23c021cac
- TLSH
  T1C3418E01B0EB9475282B40ADF6BE711C6598841F8A5B9997FBBDB7D03F1C0ACE9D1848
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral22
- Target
  wormgpt_enhanced/app/src/components/ui/button-group.tsx
- Size 2KB
- SHA256 ccbf09097f5ebf2eec86f1a96cb92e8dd39d251ebb5867394196c8b4fec68a5c
- MD5 73a99a33fdbb8cf7742f0aad44829e25
- SHA1 1caff1528ff911932dbcad4ba6349f097c4a2b88
- SHA512 b841c8568f9f5037af03eadfd562a12113f69e020bf38cedc1f95a7bf2edf806d7e67703152fa9f2c04f7d2dd70d96d375944f3204748c2b18f89e00a9a2e3f1
- TLSH
  T16E4123C260A239F815471055EB3F902AB2B4A0ABDEA83C10F2AD73D01F8464D4AAE395
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23
- Target
  wormgpt_enhanced/app/src/components/ui/button.tsx
- Size 2KB
- SHA256 5a5c4b8b60a8a80ba7b8b5d0319be2d3c61bfd2ce4fc2a645371dee9f6db0a77
- MD5 7e1b8d2215587c9ea334242b2afa4a40
- SHA1 8ab621acf5f524e05ee1e75ca21dd4c83811151a
- SHA512 e2810c9d9b541d18e49da06ed8514dbc3336e01a231def32e8d4e7d0bfaf1b8e559aa3be02632e7f835c92a69e813ad3bb0b487e30a689b15e8bf2699dd58c3c
- TLSH
  T153414146B2A065A42702443CB199BC61928CD54FDF2A3C56F6EC13E81FE905E83B4A19
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral24
- Target
  wormgpt_enhanced/app/src/components/ui/calendar.tsx
- Size 7KB
- SHA256 c8e67d15d8622135b72045d974a3234ea99f5ffcc1b981eafea8847a14ae1f12
- MD5 5d3fb01c5e7002fb7d8a3a9b7eb490da
- SHA1 2a99d4e7e3fbe8fe9f806d151160f932c796d988
- SHA512 47dce202faad52c822c915b9d387aeaf3495f76ba02e98d850b97ba5576975b236557fe4a8dd674fad73d1673649090252294956ff84dfea22d22ff1063c12a3
- SSDEEP 96:UjukELQP28klYvL8Rk4a4x2r0DIGAntaG2vRgjMiCUyIoTWLMD:U+QP2tlYuk4a4gjrRO
- TLSH
  T1EAF14482B1E151BC0997627979AE908A1D04D52FCF2B7C14FBFD61D82F8C01A94F298B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25
- Target
  wormgpt_enhanced/app/src/components/ui/card.tsx
- Size 1KB
- SHA256 2040cdff27cd1ed771e0ebbd15abcd73d31f2f1e4be6664bd6816fffd2a87476
- MD5 a6752f4d1da504c7f03196d90cde4b2c
- SHA1 8feee1b00f66ec15b179200ee1f73428e1e93ee4
- SHA512 29af7265922fc3b5c533571633bde92bcdee24385675f300ba2690453453053b34bbf8981727173a6a3c54e1df422f5e24e9e326b3c7c1318b9ce9e6543d06c8
- TLSH
  T196419B62B5E3B47904AB8135AF2F7A4D25BCA36B4A8D5A4AF7FE70C11F4105CECD1408
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral26
- Target
  wormgpt_enhanced/app/src/components/ui/sidebar.tsx
- Size 21KB
- SHA256 6074d8027b4bc9ea2d5eb1527a8528a7fa69df96f6261b9c6441c3980d41700f
- MD5 686da2b9988bb2320a83efa07b4bd551
- SHA1 9321544fafeb9b88976c097331412a6d0a495f7e
- SHA512 62ec2be19a0364def7e619dcdc2fb60c78b6cfc40a3d164aa0489469f12ee38364c57902a324b1b0474dc9dc99f508c5f61282c5c335c520fba1721316b958d2
- SSDEEP 384:UgP3n+d0+FnLP/qY8IHcgzOulZz8u8kJJzX//UizYouHZiouuBuudz2uHl:/PX+rPN7sRZV
- TLSH
  T1DFA28752F1F124A8084748B1BAEFA138195CE8DBDB499851B7FD60D81F4A31FE8F18D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27
- Target
  wormgpt_enhanced/app/tailwind.config.js
- Size 4KB
- SHA256 85a2e081e8af84d90de96d9c584d56bcc6c1a0112d714d14b43da6c8fb1fea97
- MD5 7d96410d203e5dc03e23591f6cfb44b9
- SHA1 859710dd8d04f1723dc31f7b5718239259dc8bae
- SHA512 9d43867e9f53eb854387e544c2b87af821c035e5366c775e1f7142d1c6d264b8e31c635a6b7472a99ef0ca7094fab4b60add8c47dcf226c9885b4f930be99498
- SSDEEP 96:MVVWgDxy722lDKuUZlfPtRGNgXg/RrTEg:M/WgDxyikDKuotRGN4gv/
- TLSH
  T176B1AD24D6B958362A03B1BD53AF2938103890EB4D357EAA334D76750F8C3EF607566E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  wormgpt_enhanced/dev.sh
- Size 292B
- SHA256 be4222a6d015a89583df0c5deba9b53816d066f2c703b39d1bd674ba704308b6
- MD5 afad8fa829de3f15c3f06df3d33fe96a
- SHA1 1425c5c084c3eb61a2b2cb86fd51942db24a6196
- SHA512 8d8904c4d7a1f38c7ac1117f4ae3071658f2b84d56b01e3419c40b5f7a5762f599fbce4bd4fa480b49c339bb1b9677009d6c43a58003a61201a9440e352a5509
- TLSH
  T1D6E0C26274B09D1B2B50445E4CA53989ABDE62B7880D49605182B56EA0EC29E30CE72D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral29
- Target
  wormgpt_enhanced/install.sh
- Size 2KB
- SHA256 a8e4c3fc2abb20361ec29994c79eb57ab81649d88dad2f66a215e3aba211c4db
- MD5 dfb04b789b03cf7972407ca96cfc3b98
- SHA1 0f0887c6d399c402a3d938495c48b32e678636cd
- SHA512 3eb67eccd1263c943fce0f5c0604400711f2af28f179f0a0fcb714ccdb084746d22d8a07e0931217fc0c25ca93b167121cbc60c5118a52d0bbd4af5ac6a0facb
- TLSH
  T1D441CDB672A02579221B0FFA6DB61D59B5064527C3240D20B18F68FE1FF48DCFC5D21A
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral30
- Target
  wormgpt_enhanced/server/index.js
- Size 7KB
- SHA256 62f4be6d0653cc0d0e581bc10078ebbc9ee0f9466733bb1a7203875b8f1f8f70
- MD5 77c2232dc6b8c1c4950781c386ddf059
- SHA1 27fe23a43f3f44342acbdade6193820308ddfb67
- SHA512 da6f4e8dca71f2109a45a4d92a0eb7b22c966adf806a3d854090e66ffa19b43cf3d17cb21ddb377c341662eea4ffccd281b815240536404433b2f98bea04bd12
- SSDEEP 192:F/MlT6iMNPKXuXTsXuXlhqn25y1as1lAeMkJaVQe/k41Aaw:F/z3s/nllMkqLq
- TLSH
  T1D0F184CB19BB07154EBE61DD2981901E6E3BD412B714D9A1F36D1370EFC1868C4E2AC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  wormgpt_enhanced/start.sh
- Size 1KB
- SHA256 4b36a2d34d4f1fc94d521df6a9c97dafdb4014e3dbe8d1974f04f167ba989cfa
- MD5 ed489e9b7a95eb31a6fa69becd15e63e
- SHA1 b766cc3d38875b4cb38f6f75360357e4e62f3b06
- SHA512 f630b5dfd2e23d83a9aa6d5113b6cdca5c5f1d7634602fb226cc6015bfa1da716bceed1ad9594f85b7b093516f0e6331fc7e808871f7ea81bdd19eb9a2c09a70
- TLSH
  T1202155A5B250653A07198C2529F12E1CA509026BC2090D21300FB8E71F789DDFC98126
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32