General

  • Target
    GenP source code.zip
  • Size 33.2MB
  • Sample260805-ttf2qacd92
  • SHA256 b96449e2c5e3c956af2fb07225840c0bc2d345c4331743e2cfd9763d478261b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://www.autoitscript.com/files/autoit3/autoit-v3.zip

  • exe.dropper

    https://www.autoitscript.com/autoit3/scite/download/SciTE4AutoIt3_Portable.zip

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://www.autoitscript.com/files/autoit3/autoit-v3.zip

  • exe.dropper

    https://www.autoitscript.com/autoit3/scite/download/SciTE4AutoIt3_Portable.zip

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://www.autoitscript.com/files/autoit3/autoit-v3.zip

  • exe.dropper

    https://www.autoitscript.com/autoit3/scite/download/SciTE4AutoIt3_Portable.zip

Targets

    • Target
      GenP-main/Releases/v3.0.3/GenP-v3.0.3.exe
    • Size 1.5MB
    • SHA256 fede50c28f441d0984a262813c0af01c3d34f2d6be3c4e115e32c8420e38232f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GenP-main/Releases/v3.0.3/RunAsTI64.exe
    • Size 2.0MB
    • SHA256 23d68af87f6da9ab7264a7e420905833eaf0e3ec47358c8193ed5c7c0c0c1369
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Target
      GenP-main/Releases/v3.4.13.4/GenP-v3.4.13.4.exe
    • Size 1.1MB
    • SHA256 3c80ba8fcdf07dcf7f676fa69f043bbc0c127680514281aced70c2ba9775c1fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GenP-main/Releases/v3.4.13.4/NSudoLG.exe
    • Size 156KB
    • SHA256 871e4f28fe39bcad8d295ae46e148be458778c0195ed660b7db18eb595d00bd8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GenP-main/Releases/v3.4.14.1/GenP-v3.4.14.1.exe
    • Size 1.2MB
    • SHA256 cccf67939437aa7bcd05f3bf97ee062ac0f77aeac379f10943dce8306433afb2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Target
      GenP-main/Releases/v3.4.2/GenP-v3.4.2.exe
    • Size 1.2MB
    • SHA256 b09ec2ac41cc220b2b2b68b23bf120dcb518850341d8e3e088b50185ef624ed7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Target
      GenP-main/Releases/v3.5.0/GenP-v3.5.0.exe
    • Size 1.2MB
    • SHA256 7dd95035a54b934491166ed29456447316df9b684731f062486da9d0db74cece
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GenP-main/Releases/v3.6.4/GenP-v3.6.4.exe
    • Size 2.8MB
    • SHA256 bf91fbc4c1ec50b374e78f6753df416623ec79c49c2d65b99ead678157f1b7de
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GenP-main/Releases/v3.6.6/GenP-v3.6.6.exe
    • Size 1.5MB
    • SHA256 1dcb04625f4555b6988c7d9309c49e872fff584e913aad8530227cf641fd018d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      GenP-main/Releases/v3.6.7/GenP-v3.6.7.exe
    • Size 1.5MB
    • SHA256 6a30e203386035f8fa6baeacc8a527093331c0c6712103f974dc10ddf5ec9af8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      GenP-main/Releases/v3.6.8/GenP-v3.6.8.exe
    • Size 1.5MB
    • SHA256 0a6a100266ef8416e6e02eec5ac64078c14f4c47a9593c2fb1be955b2fff5736
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      GenP-main/Releases/v3.6.9/GenP-v3.6.9.exe
    • Size 1.5MB
    • SHA256 cf3bf1973ed8a75fc816781cd39dd19f8c2c72f27a50d7506ada4e7c87b5913a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      GenP-main/Releases/v3.7.0/GenP-v3.7.0.exe
    • Size 1.5MB
    • SHA256 8bcf09f7c43ec54087a54ecc064e01d3f9e82cecff410c3e748eb8829fec3498
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      GenP-main/Releases/v3.7.1/GenP-v3.7.1.exe
    • Size 1.5MB
    • SHA256 797253add1f9fde1ecdbc49b02f4529746aa1b6005fcbd3817adddcf3e295eb9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      GenP-main/Releases/v3.7.2_Interim/GenP-v3.7.2.exe
    • Size 2.0MB
    • SHA256 7cb3fe26ce9f4845870a8bcfbbe00d41ae0232573c1c625e2bef06ec3ed18c7e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      GenP-main/Releases/v3.8.0/GenP-v3.8.0.exe
    • Size 1.5MB
    • SHA256 6721aaaa5b8a0bbc1bc68797e6b5f32b65129896c4e2e082f995446f7a9b5f8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks

static1

upx
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

execution
Score
7/10

behavioral4

execution
Score
7/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
7/10

behavioral10

Score
7/10

behavioral11

Score
7/10

behavioral12

Score
7/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

upx
Score
5/10

behavioral18

upx
Score
5/10

behavioral19

upx
Score
5/10

behavioral20

upx
Score
5/10

behavioral21

upx
Score
5/10

behavioral22

upx
Score
5/10

behavioral23

upx
Score
5/10

behavioral24

upx
Score
5/10

behavioral25

upx
Score
5/10

behavioral26

upx
Score
5/10

behavioral27

upx
Score
5/10

behavioral28

upx
Score
5/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

upx
Score
5/10

behavioral32

upx
Score
5/10