General
- Target ChatGPT Installer_crypted.exe
- Size 1.6MB
- Sample260815-sy8f4aygnf
- SHA256 5b6ef59eda651d7ba6f9ca2e50ece4319cea8552441259e2a44273a349cc1e27
- MD5 281dbe92fb44fe2938c900a36e082744
- SHA1 e005f0afadd65e4e3bf603c0016a1830047cd122
- SHA512 95c2e8c13df792a4179bc5db23d6d99b547e0dffdca2fb4894128673017ebd976546661265ee5de27ce4ff9f9abbc5847683265bc1d269fabb1b4afb2868341d
- SSDEEP 49152:/AAbywkpertzzI8C/94z/NUyEjHpXwWBXVHGJ:/dT9xYH94z/hE9PaJ
- TLSH T19C852356B3B615E8F47B4574CE858362EB7B3E521340AA2F0365823ABF027D0AC65F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ChatGPT Installer_crypted.exe
Resource
win11-20260513-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target ChatGPT Installer_crypted.exe
- Size 1.6MB
- SHA256 5b6ef59eda651d7ba6f9ca2e50ece4319cea8552441259e2a44273a349cc1e27
- MD5 281dbe92fb44fe2938c900a36e082744
- SHA1 e005f0afadd65e4e3bf603c0016a1830047cd122
- SHA512 95c2e8c13df792a4179bc5db23d6d99b547e0dffdca2fb4894128673017ebd976546661265ee5de27ce4ff9f9abbc5847683265bc1d269fabb1b4afb2868341d
- SSDEEP 49152:/AAbywkpertzzI8C/94z/NUyEjHpXwWBXVHGJ:/dT9xYH94z/hE9PaJ
- TLSH T19C852356B3B615E8F47B4574CE858362EB7B3E521340AA2F0365823ABF027D0AC65F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Boot or Logon Initialization Scripts
1Logon Script (Windows)
1Scheduled Task/Job
1Scheduled Task
1