General
- Target GPO Hub.exe
- Size 218.6MB
- Sample260828-3tyq7stygv
- SHA256 9110a95c20716b6930f34288ef6b88b0c230d9b50b27952eb7417cc4f1440ea2
- MD5 2d9cc097ed9254040867626b7e4e55f8
- SHA1 486b4c8eddfe501957eae3d070daab333e2daf5e
- SHA512 1033b78cb60eff826935e0fbfdca16e020d92323cfb3bc19759028e2a8b5d92a464f9aa9835acdf9b68769e01e2085c28eafb62ab2270f7134a45badd8781ce3
- SSDEEP 3145728:/Deo0g0OIvGctobsX2Ais9YtNq+2rHqD9cIA308URTE6eCPrzelKbDSc/iFAM9ly:i43wHgAiFZ2mc0l29CPrzIKTe91p+
- TLSH T1ACB83399AA7045BBF40B723762E5EC01E1367438936F874F22F119A515C76C08FBF6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
GPO Hub.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
GPO Hub.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target GPO Hub.exe
- Size 218.6MB
- SHA256 9110a95c20716b6930f34288ef6b88b0c230d9b50b27952eb7417cc4f1440ea2
- MD5 2d9cc097ed9254040867626b7e4e55f8
- SHA1 486b4c8eddfe501957eae3d070daab333e2daf5e
- SHA512 1033b78cb60eff826935e0fbfdca16e020d92323cfb3bc19759028e2a8b5d92a464f9aa9835acdf9b68769e01e2085c28eafb62ab2270f7134a45badd8781ce3
- SSDEEP 3145728:/Deo0g0OIvGctobsX2Ais9YtNq+2rHqD9cIA308URTE6eCPrzelKbDSc/iFAM9ly:i43wHgAiFZ2mc0l29CPrzIKTe91p+
- TLSH T1ACB83399AA7045BBF40B723762E5EC01E1367438936F874F22F119A515C76C08FBF6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.