General
- Target Gopeed-v1.9.3-windows-amd64-portable.zip
- Size 33.6MB
- Sample260807-nfq2wafe35
- SHA256 02b3b2f0ce4b0e0008edc835802ad6f4b241eb863f312b0bdd77b2b2afc9e012
Malware Config
Targets
-
- Target app_links_plugin.dll
- Size 136KB
- SHA256 ccafc1230c8b7b9f74e78550d19607f77cc835ac8e024d2b155369d5ebab16ab
Score1/10 -
- Target dart_ipc_plugin.dll
- Size 91KB
- SHA256 31710f186e7975d7dc3bcab3663a3ae65bb9018d66c0064ca9bce0ae590a170c
Score1/10 -
- Target data/flutter_assets/assets/exec/host.exe
- Size 5.9MB
- SHA256 97b328e948de8c56409b6e0c85c75d2c6f8f95d602360ba93789c5f6be4c75ee
Score1/10 -
- Target data/flutter_assets/assets/exec/updater.exe
- Size 2.2MB
- SHA256 ad74e1a23d31b45cb455713393b8c71576c844903f1e1bb8aadc93de078bd2d4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target data/flutter_assets/assets/icon/icon.svg
- Size 4KB
- SHA256 fd8bff0c19de9a56aeca3f457a2833ebdfc6e9c8d74fefa38b1644c2e18e72b5
Score7/10-
Loads dropped DLL
-
- Target desktop_drop_plugin.dll
- Size 89KB
- SHA256 66a36614f6170b7fc1874f0e02cbf0db8b182767e25b3b83957dfb83a7e0acb0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target flutter_local_notifications_windows.dll
- Size 89KB
- SHA256 316fbc968ca4127ade96ad0ae05f6eee102198a939bf24ad4308c0c0a267bd7b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target flutter_windows.dll
- Size 19.8MB
- SHA256 eb40d611ed1994a15e65ef3b2c399e04c860b2d2e021c1d1005775a4a7aee376
Score1/10 -
- Target gopeed.exe
- Size 62KB
- SHA256 b46d7b32dd6a96275fa492a2c49fd03f3a2dffc717abe6f91fb5d4df20775d9c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target hotkey_manager_windows_plugin.dll
- Size 104KB
- SHA256 1872beb3e94e020a2aef5a7c9da7869a765104f434414b986233518cd7c510c0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target libgcc_s_seh-1.dll
- Size 146KB
- SHA256 f9b64f3fc26fd1e8899503e84a62567cbe5cefc2bd3ef0fee5501386b2302cd5
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target libgopeed.dll
- Size 40.9MB
- SHA256 34f5501c750b98bfe633ead574ed60faf1a65365b3588241729d66479d75f0f3
Score1/10 -
- Target libstdc++-6.dll
- Size 2.3MB
- SHA256 a4c599da9bba64b6d8a3bb6d3d55e5da8067befe535295e9410c4663ba61d77f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target libwinpthread-1.dll
- Size 63KB
- SHA256 d66b00e4a4385344bf2be54b03446ea19ced654c78a18a024a0b43971d68459b
Score1/10 -
- Target msvcp140.dll
- Size 540KB
- SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
Score1/10 -
- Target open_dir_windows_plugin.dll
- Size 84KB
- SHA256 667b8b79ba7fd084c8ff3a1b28d1c812687df8ff7933dc7608c9339efc779ca8
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target permission_handler_windows_plugin.dll
- Size 115KB
- SHA256 b94e2753649bda5626b7d8413b864f8558c1c1a02265be37db4be5e000e79cd2
Score1/10