General
- Target GG.eXe
- Size 158KB
- Sample260809-ld5fdayscv
- SHA256 f2ebd3f533c68ec53b541ef64f1ac4671bc97adc4ed3fefeee49d0cd4f50f9f2
- MD5 bdcc9fa5ddd7b37bc62c41a896d8d875
- SHA1 ef8b9a4b9955aaeca474448c7139cf2accb87d48
- SHA512 e20243794597fa00a36e3d7f0f5a4ca67342379908fcafd0dd525921431f78749456f2d3ba5d61dd809b9dd6e3d269697a4b9efafe38658bd33ff222d80adaf2
- SSDEEP 3072:1ahKyd2n31V5GWp1icKAArDZz4N9GhbkrNEk/NLAh8vnEDR2TgwW:1ahOFp0yN90QE9
- TLSH T19CF37C5A63E421A6E4F6537498F203875A32BCB16B7492FF13D4D57E0E336C0A532B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GG.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target GG.eXe
- Size 158KB
- SHA256 f2ebd3f533c68ec53b541ef64f1ac4671bc97adc4ed3fefeee49d0cd4f50f9f2
- MD5 bdcc9fa5ddd7b37bc62c41a896d8d875
- SHA1 ef8b9a4b9955aaeca474448c7139cf2accb87d48
- SHA512 e20243794597fa00a36e3d7f0f5a4ca67342379908fcafd0dd525921431f78749456f2d3ba5d61dd809b9dd6e3d269697a4b9efafe38658bd33ff222d80adaf2
- SSDEEP 3072:1ahKyd2n31V5GWp1icKAArDZz4N9GhbkrNEk/NLAh8vnEDR2TgwW:1ahOFp0yN90QE9
- TLSH T19CF37C5A63E421A6E4F6537498F203875A32BCB16B7492FF13D4D57E0E336C0A532B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Adds Run key to start application
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1