2dd3364ad7fec4274b155d48848ca459e948bef0df6cea97cad18ce07bb4653e | Triage™

Login
Reports

Overview

overview

7

Static

static

3

GTL.exe

windows10-2004-x64

3

GTL.exe

windows11-ltsc_2024-x64

3

GTLConfig.exe

windows10-2004-x64

3

GTLConfig.exe

windows11-ltsc_2024-x64

3

GTLDedicated.exe

windows10-2004-x64

3

GTLDedicated.exe

windows11-ltsc_2024-x64

3

GTLReporter.exe

windows10-2004-x64

GTLReporter.exe

windows11-ltsc_2024-x64

binkw32.dll

windows10-2004-x64

3

binkw32.dll

windows11-ltsc_2024-x64

3

dsetup.dll

windows10-2004-x64

3

dsetup.dll

windows11-ltsc_2024-x64

3

mss32.dll

windows10-2004-x64

3

mss32.dll

windows11-ltsc_2024-x64

3

mssmp3.dll

windows10-2004-x64

3

mssmp3.dll

windows11-ltsc_2024-x64

3

net.dll

windows10-2004-x64

3

net.dll

windows11-ltsc_2024-x64

3

net_dedicated.dll

windows10-2004-x64

3

net_dedicated.dll

windows11-ltsc_2024-x64

3

steam_api.dll

windows10-2004-x64

3

steam_api.dll

windows11-ltsc_2024-x64

3

sudo.exe

windows10-2004-x64

3

sudo.exe

windows11-ltsc_2024-x64

3

unins000.exe

windows10-2004-x64

7

unins000.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
GT Legends.rar
Size 12.7MB
Sample260819-ekm2cawdrd
SHA256 2dd3364ad7fec4274b155d48848ca459e948bef0df6cea97cad18ce07bb4653e
MD5 f91786d3f480361b53c95821daeda935
SHA1 e9ef18b31ff9f36ff0099f63153eac1b0e9eb69f
SHA512 c2cb63ef74755edc97c0278babfe63785c99c52d0443dd868a88b3a2e0658f4ccb17718dd5d809252e3020d22365c79d57d9c7b19b9d35b4227dbf87456554f2
SSDEEP 393216:f+9iUqPLSkvIz/KfJCcY/CXkYApJnwaSnx+ZUq8g:29i5PL1mIJ7agMpJQx+ZUqz
TLSH
T10AD633B7D27AB300F039647F1BE80F0D2585F2EC92A1FDA2D94A5B83A6A4945DF05473
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

GTL.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

GTL.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

GTLConfig.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

GTLConfig.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

GTLDedicated.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

GTLDedicated.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

GTLReporter.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

GTLReporter.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

binkw32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

binkw32.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

dsetup.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

dsetup.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

mss32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

mss32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

mssmp3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

mssmp3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

net.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

net.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

net_dedicated.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

net_dedicated.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

steam_api.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

steam_api.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

sudo.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

sudo.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

unins000.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

unins000.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  GTL.exe
- Size 3.7MB
- SHA256 9f3ef5096e299e02c5c463601f5616cb37b2c8f94544537d86a6d280ec1bde5a
- MD5 39f5eb5118e9156cece840b4d6bab97b
- SHA1 ea1239349279a1a410d7076d8816b8e4be302852
- SHA512 5e3e8819b06c045814de54426a5ccb867ba21287e81ddf1117220440e2337eb5be20902c1b15cb5bdd7283d80810ce2caad2f31540e1b82465b5726fdb516211
- SSDEEP 98304:PR07soX33GvGVeunOtj/VdKhFGh+lxe1npuic5i:PR07soX3W+ZnOtTOhFGhw2T
- TLSH
  T14506BF01F29650B3DD522A31148B67BAE334BF48037957CB97E4FD26FB705B1A52A30A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  GTLConfig.exe
- Size 1.4MB
- SHA256 7052dfc1e995ea334335e20b67e095be0c5a11332730792ab4ba4a617fd137d6
- MD5 5a745ac4a8ecad74b3284554b527682e
- SHA1 7a6744433057419ff72635b213a78a637592c2b7
- SHA512 008165f05eeaa619fe5ace50ba9330d20ed0d279f3b51decab468e66e9a1d29dd121bdd1666ae6ad0625dd54ab21a92506ad796d04186e2ce1749bf402d3157e
- SSDEEP 24576:0P2BMtHLcPyk5NDBUyf68cvdNSLbrcjJm5k4xxD4lXi1BGaYVcdOZ:0QP5Na91ov75LxD42BGRVckZ
- TLSH
  T10E65C051B2928032C4A22232054BA3FA727AAF5A477C55CB07D83E3F7E705E55F36396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  GTLDedicated.exe
- Size 3.7MB
- SHA256 74317da53f1cf53a21b1938e8be9fdeb8ccc0f681b5849e6741c4d60e156ebbe
- MD5 f6e5f19aaae5cb11244c3ec07217a871
- SHA1 2f0e838106b53adf069d2263ba1dae5f8ed34dd4
- SHA512 32f01dfb01af0088f679021af76e2e0b8f943c7028a3cbf3c953bdc043c41f427730c614c1465702225ae9a3031c79a43329c8c8395153ced230edc18978510c
- SSDEEP 98304:OWbxMT5WSee8eqWlgAIgR3bIQwkj4IvB1HKuJgbiNUf2xIjq18ne5QLS9:OWbxMll/8eqWlIgR3w4z
- TLSH
  T12106CF12F58B40F5D9422A3010DB3BB6A634AF48473867C7D768FE3A69325B5A43D34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  GTLReporter.exe
- Size 108KB
- SHA256 642660ad0a0db15e73fb20e165af116cf4a71652116ce37d0d43dda23136dcb2
- MD5 a60f7380783f08f377f029cd390fc1bc
- SHA1 a089f4937862f92e479e3c8357eeb2a10eaf064f
- SHA512 2d9e2723d66f76b8be4fa955839d98bb6fc1759802caafad17ad7824433d096bdff90bc60c29971193c348497aeeef58de24c162836b5ae2f0effa66ac3e8f02
- SSDEEP 1536:Hf1vi2vzdeZkkMXmSQprQOQnQCwAy3qiTGOCfmKaAbOO0X4KrcttttYfWvdaTXa4:/pfKitQCwAyzTCfmK7bOO0X4KAFRa
- TLSH
  T1A3B35B43FF824477F1758070849706FA5A7AA803E7A97AEBB7481A1F18740E55F723E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  binkw32.dll
- Size 331KB
- SHA256 14594525d4416e25eea990b16b9675a4d1db945f8033607800d260dfde3f3649
- MD5 a8b626fc625c11d3cc4266a7378bbb51
- SHA1 13d75ddb5431c7c1d644b47d361a990a5c0d5a5e
- SHA512 b1e75c168710ad1122472fc87a5e2c71d241fa4d29e9fdb53b287f592d1358fe651f5f80408901cd1684eb67d6e60cf1697514d959424458ae18ba3fb32e3feb
- SSDEEP 6144:ogvPxnpIJwbgcrZRMH3g33QLcE/2DchJigaiOOaGWa8dAn9eHXeVY8+U9n:KaTZB3jE/2oPigaiOOaGWa869e+6wn
- TLSH
  T15C746EA7F69D6CF1E0B5E63D0D8E220BA21A6710839353E397F41ED528AD8F24474B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  dsetup.dll
- Size 34KB
- SHA256 0fdfff9a5db0bd4b16a9663a6616308c511a21e3bec0bbed60ddfa2597c73acf
- MD5 4f5f399a970a921f883975a2228a1c8c
- SHA1 f2c39bde79a6d91f8e35dd4eee5ebed4573c5615
- SHA512 7a03587c77eaad433fb49694b9cabbc0bda8e8554a97ee3ec63ca09dd7df37cae0031c1b9b52ab4d76d45fd847adf5a7680bb0dc803166ce4fb4cfc12aa017ef
- SSDEEP 768:7M0v0mWosSeNwRQy1E5MYDgZBC7Q3+jPJmEDUWe:7PdRzeNwp25MY8nC83+LJmEDTe
- TLSH
  T192F25C1279A180B3D151463529E9A702A3BF802456FE8D87CF1857999E733D7BB3E307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  mss32.dll
- Size 364KB
- SHA256 a1a8e8abf9d5b1991b8691b46b6fba3d9236e185e21d0632bb5b5ea51c7b5789
- MD5 6bc087a9eda4b07daaefb9f6b9442a71
- SHA1 074a6d05fa667e5cab1a7e5356e1632212f9834b
- SHA512 b59603b4e95c0a65ca39ba29044275b583ce26ebe6a91094d7f49b9fa97e43244a10558cd931ca3205b5b575ffa7f7a20f6eb05e076692be596dc398bfbdd2c8
- SSDEEP 6144:5qSxN3U4gzO70ywJHPAPphRRiXqOEu7CXX71+Y4aHrmtcrHAOLayKR/4:5vvk4gtip3RiXqncCXroaHrmtcb19
- TLSH
  T144845C82B6C040B3C8DA3E32A457F32AA53ACB08534A45D77B9414814D53AD6FAF977F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  mssmp3.asi
- Size 146KB
- SHA256 f5f058f35bf6ee64c0dfd08da11915c4ed647456313a20c116da915d783286fd
- MD5 d6341802cd02c3e84dd194a07918d03d
- SHA1 bd11578b28ec76a56f52976db42aca563860ca25
- SHA512 8e7a57d75835eb0d7d10105488b7ffc2dbf88e58f5fa3b4b471c279410840d6adcd1835fdc2ee18101e4907c0fe07b7e2b4353b4cb8f042524c9c09664692f5b
- SSDEEP 3072:fjg9esi/4PhI2fO5a2NZzJFpDUgk/Ok60RYdiEVy5lAg0Fupl+3:LgVO5a2N9JFpBdn85lAO
- TLSH
  T1F0E339B3EA925072CCAFC93100CDBE0E192A35D786D245E757BC15DA8F50FC98D2A5B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  net.dll
- Size 220KB
- SHA256 6183f34cca9ac58845a995e1f8970f5f98356de6e5621ef63869aeb81f1fdc94
- MD5 7dca61acfb79b13c64d400872cdd1702
- SHA1 9e617d0718f08b38a6a684efa9935e927ca51a7a
- SHA512 664fa91a22a642c317fde27e23c1532a5f45cc1dddafb7d0e6c550a8748e0b568266d070d426e7d2784917e48efa15e341b7e457d53cfc828b1ff1e21e9ac880
- SSDEEP 6144:EO8HVsak/NXuxQ7wv4vHRurkochKEeBEZMSv:f8HVst/tuhcc9chKF0MSv
- TLSH
  T1B2245B12A6CAC0F5C60E6B70747D9B3DFA75868E4F318BD7531CEC28292A1D0B937256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  net_dedicated.dll
- Size 220KB
- SHA256 54fa149f286030472ac4c5192e53e61719c41d1eb992c59b3333af23285d71fb
- MD5 f0c8672a59736384544c8ae18147f925
- SHA1 88551e426598bd9bbe10ae0c6dda7ef7b124d4a5
- SHA512 9321693e20ec931a0985f3fd8a0e864761807888d72d6eac4f04c56dbfbf9e396163ac391cf7f00612522e776f737288f8935ae2c14f81283195647cc4aff1a3
- SSDEEP 6144:cO8HVoak/NXuxQ7wv4vHRur5wchKEeBEZMSv:38HVot/tuhccychKF0MSv
- TLSH
  T125245B12A6DAC0F5C70E6A70743D9B3DFA75868E4F318BD7531CEC28292A1D0B937256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  steam_api.dll
- Size 15.5MB
- SHA256 ee7ac4f09e314aaf53117654057d88a12b60e2b848e99391f123e72165d94e33
- MD5 251d88c60aad13f6b1a0959cb1ae4a66
- SHA1 841e133490585989462aff7541e0dcf8066bd7b2
- SHA512 88592723900ed80cb25024ab7a6727ff0dc71797a0fbe7979aa72fefacd98676fa99156a14a0d97604103b25d3e8c72f28dca6a1af69c5fc780ef7a04527a2ac
- SSDEEP 196608:ir/Ihj/5/ysHEYFfGawduLzzpQhY9/bnfKhWQ/Jsn0Bd7wciZgA72D8UnBZsZo:b7/o3hY9/bnfKhUn0BxwcIgA72bBZD
- TLSH
  T10DF6BE02E241D135FBB701F68AFA46BA5F3CAE71171512DBB2C076588B66AC1FE31613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  sudo.exe
- Size 7KB
- SHA256 6678155941ba717127b64acd329740559165def5d382525454bb0814f5f634e5
- MD5 8ff83392ec86e292e8e8bc5dd8f47710
- SHA1 e9d3ed682a0813081316ca3aaa8150d1b5155ee6
- SHA512 ee226357fc7826a8c1f40d4a03f0f67a9638f0cd1aad921d053129b1dbdbb8606e6e636466ed86b09aa9eb7031f8c4922f22cf65f16da45e0516ab52596439fb
- SSDEEP 96:nS62Qw4MI8LPV3vvKVGdLDlA4DfYzq3qxbUtLQOzruVABG6pDCtxXs6:nv8rBMx4jYNbUtLQOzruVQG6paxXs6
- TLSH
  T1A2E1290F5B59C063C7CD0AF40A33D2598679146127D180FB3EA6476A0AE16D1E46779B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  unins000.exe
- Size 696KB
- SHA256 cd124b3f467849068513cab4b2ecb16f75800063988725c4db4d9968190b8d6b
- MD5 884fcee337f6fb34b2147ac985cf3c06
- SHA1 eca4314392c545bfc344f8506a32a5a84cfc663f
- SHA512 6c45aaa4128c4d27bf8c22e68b205f0821f298cc79b0bfe80d8c65cb01ef7ba72dcbf7857fde123dfabf60e5dfc5da406e2f479731de6347b327ba8eceaf327f
- SSDEEP 12288:g/vksLWtSNrPi37NzHDA6Y1gbl5d7Ifoz4mrNNpRpzqUx9M:8vksLWtkrPi37NzHDA6Yg5dsfoTzXx9M
- TLSH
  T1A6E46B22F2A09837D1B32F749D1B86D55936BE103E38A59736E81F0C4F796817A273D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy