General
- Target gdi_payload.exe
- Size 616KB
- Sample260801-v2x6mssdkc
- SHA256 91edbd6fbd5f615271383de80115ac0d78742ecadf756aaa15df4ee922946a12
- MD5 227518b89185e62c74fbfd6687ba818a
- SHA1 843a4b2d0632f647d564681ce0682d6bd3809976
- SHA512 910b2016f0b3bc41c59d42c65ce197e78eee8cfc108d40316a12c2446ae163e3a12c2d6b56782031696ffc8ce9d8a9cfa1e34764e17299479b1ceb0b7608731f
- SSDEEP 12288:hF5JT7mQqpjeYaJCoTzFqTvK7VVoIDdnsnSH9wYj1AQoWJ:TL7TzUO7VVo0wYj1AQoWJ
- TLSH T172D4E68235DA0CFAEE932B7C55DB53366B36FE708B2A4F674504D2322C136D16E5AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gdi_payload.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
gdi_payload.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target gdi_payload.exe
- Size 616KB
- SHA256 91edbd6fbd5f615271383de80115ac0d78742ecadf756aaa15df4ee922946a12
- MD5 227518b89185e62c74fbfd6687ba818a
- SHA1 843a4b2d0632f647d564681ce0682d6bd3809976
- SHA512 910b2016f0b3bc41c59d42c65ce197e78eee8cfc108d40316a12c2446ae163e3a12c2d6b56782031696ffc8ce9d8a9cfa1e34764e17299479b1ceb0b7608731f
- SSDEEP 12288:hF5JT7mQqpjeYaJCoTzFqTvK7VVoIDdnsnSH9wYj1AQoWJ:TL7TzUO7VVo0wYj1AQoWJ
- TLSH T172D4E68235DA0CFAEE932B7C55DB53366B36FE708B2A4F674504D2322C136D16E5AB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application