ffe1692b59fa6db9063f688efd73e6b0fc7956426868b18a3e8fa0b5fe2b752a | Triage™

Login
Reports

Overview

overview

4

Static

static

3

GMIDX_v1.7...ch.exe

windows10-2004-x64

4

GMIDX_v1.7...ch.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$_47_/GMp.jar

windows10-2004-x64

1

$_47_/GMp.jar

windows11-ltsc_2024-x64

1

$_47_/GeneMapper.exe

windows10-2004-x64

3

$_47_/GeneMapper.exe

windows11-ltsc_2024-x64

3

$_48_/Data...re.bat

windows10-2004-x64

3

$_48_/Data...re.bat

windows11-ltsc_2024-x64

3

$_48_/Data...te.bat

windows10-2004-x64

3

$_48_/Data...te.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
GMIDX_v1.7.4_Patch.exe
Size 9.6MB
Sample260805-ph549a1zat
SHA256 ffe1692b59fa6db9063f688efd73e6b0fc7956426868b18a3e8fa0b5fe2b752a
MD5 eb2a42b1f39a0d101210ee4a05e33502
SHA1 aa1921a48ccff3381cb22f737031d5ad3ccf336d
SHA512 23c7250ea3bd2c031ddb8634ee9e5fa71ad2dea564e8bc04fc7909dfedec96fb786a568b40796f5347f54c83edfb7ff3de59f12e99d7b0391d8e1010430fdc6b
SSDEEP 196608:HAAAKKOmtwTuwsTZGVo26254Pi9K19/t3oopORkBdjSCi:HJmCTUTZ+5v96tVORkfJi
TLSH
T136A6338910C4A4E2E877AC35FE34E60D9FC36967D7A1C5AE495048FB30AFB938639135
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

GMIDX_v1.7.4_Patch.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

GMIDX_v1.7.4_Patch.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$_47_/GMp.jar

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

$_47_/GMp.jar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

$_47_/GeneMapper.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

$_47_/GeneMapper.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

$_48_/Database_Restore.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

$_48_/Database_Restore.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

$_48_/Database_Structure_Update.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

$_48_/Database_Structure_Update.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  GMIDX_v1.7.4_Patch.exe
- Size 9.6MB
- SHA256 ffe1692b59fa6db9063f688efd73e6b0fc7956426868b18a3e8fa0b5fe2b752a
- MD5 eb2a42b1f39a0d101210ee4a05e33502
- SHA1 aa1921a48ccff3381cb22f737031d5ad3ccf336d
- SHA512 23c7250ea3bd2c031ddb8634ee9e5fa71ad2dea564e8bc04fc7909dfedec96fb786a568b40796f5347f54c83edfb7ff3de59f12e99d7b0391d8e1010430fdc6b
- SSDEEP 196608:HAAAKKOmtwTuwsTZGVo26254Pi9K19/t3oopORkBdjSCi:HJmCTUTZ+5v96tVORkfJi
- TLSH
  T136A6338910C4A4E2E877AC35FE34E60D9FC36967D7A1C5AE495048FB30AFB938639135
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 4913d4cccf84cd0534069107cff3e8e2f427160cad841547db9019310ac86cc7
- MD5 d458b8251443536e4a334147e0170e95
- SHA1 ba8d4d580f1bc0bb2eaa8b9b02ee9e91b8b50fc3
- SHA512 6ff523a74c3670b8b5cd92f62dcc6ea50b65a5d0d6e67ee1079bdb8a623b27dd10b9036a41aa8ec928200c85323c1a1f3b5c0948b59c0671de183617b65a96b1
- TLSH
  T18D8173BB93E00CF3D0A44BB740A71CE362B5DD201B62001F4A478EA92590B67EE7E715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- TLSH
  T12A120992E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 01e72332362345c415a7edcb366d6a1b52be9ac6e946fb9da49785c140ba1a4b
- MD5 b4579bc396ace8cafd9e825ff63fe244
- SHA1 32a87ed28a510e3b3c06a451d1f3d0ba9faf8d9c
- SHA512 3a76e0e259a0ca12275fed922ce6e01bdfd9e33ba85973e80101b8025ef9243f5e32461a113bbcc6aa75e40894bb5d3a42d6b21045517b6b3cf12d76b4cfa36a
- SSDEEP 96:JwzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuH0DQ:JTQHDb2vSuOc41ZfUNQZGdHM
- TLSH
  T171E1093571C02DF7D08D89743816BD2F43F4D52627BE05A04A7B1AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $_47_/GMp.jar
- Size 29.6MB
- SHA256 e25e2e1a58cbd36a8cffb86d41bacd01dfeb1107f860c4508c85c821e5bc79a6
- MD5 5e6e84ee9e19f7321242fc8d4379363b
- SHA1 fca6f705dd59de486682ac9df301465ec8aae52d
- SHA512 844de39edf9a107cb7935cb2ac129ca5937b21ffc4cc5ea3b1b9795580a3186d3ba3b2c1e5fbc8abb4e70a125224c7afd12a9eb226e01cdfed9cde75192ee009
- SSDEEP 196608:AcXQbG73vKgpShY8lRdnSBUc+ECLrXFJIKJnU4:J1pQhFJtU4
- TLSH
  T10767292BF31156EBEAE4CFBD64528334762250FDB217D6A24FD8DE533EC35906A40286
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $_47_/GeneMapper.exe
- Size 332KB
- SHA256 d2489d353d2d658f78e46379cb074bd8cc98c6227cdc69384bec433f0a785d75
- MD5 a5756ec9c8013ea973bd4f5902365813
- SHA1 a2ad5f16d86562449aaf24aed227b19ef4f1441b
- SHA512 0953a554db42b1799ff06875d37a058fabcdbec6b11b6640a96cf357f6619994aa604a10ca42cd63c8571ebf930da0541665fdd05a792bc57491b511e3e5989a
- SSDEEP 6144:iVk+rGe9k7BSapU64xVqLZRjupESxLH6tW+5Df:j+u7BSau6KglRSwUsT
- TLSH
  T129746D1178818032C27338344779DAB28DADAC3019755A9B73D82E7A6F74491FB39B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $_48_/Database_Restore.bat
- Size 3KB
- SHA256 c165eab6b1bed1c8a9a95b53a77a6da588be8d7a67dbc4a90d015c3a51b4392e
- MD5 0270f112d759000f4df2096c17abfebb
- SHA1 264dd975ac596f9f3b78ed74b81b8ea475c3a1a5
- SHA512 8ef8f658ab60ab654281746dba8df0d89d0f2cbcc2a55fdcb135564d625e54ddf8a315a0f48c1182791b1ca3b1ba8e41ade2027826def407f3c30f00a55db895
- TLSH
  T169814265100971338CFB99D5BA590601F61BA28F3FD47A38783D9E6C29783C22BFC965
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  $_48_/Database_Structure_Update.bat
- Size 544B
- SHA256 a56628b5dbefb7759e4bc9e8c7d5dee3ca985d4f76fbce97bbbbd9c315db2c48
- MD5 50f0b865c080b0af2fc532b363206a81
- SHA1 dcdebab1ecc38118444ff19d6b83d70a1ce9a974
- SHA512 df06e477d6026d20bb084ac79665377e0f6cb6103049544c681fbdb6b5a3274d77af076a98b2a64f1602db2b3cd6def3ab16e213b157107717fa7bc63ee44923
- TLSH
  T1C3F02B562C02D8364DF9E6C968290833F70FC2835715DD8E30A3E9698C9856EFC6DA2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy