General
- Target GPO-Hubv2.0.0.exe
- Size 53.4MB
- Sample260828-w9769adh35
- SHA256 753dc22f583efa21e7b8aa251880d681b1ed1408887cea1501419ce21b4ba358
- MD5 9715a94351632f01cff386679747cbc4
- SHA1 aaf2fb7ec2e75ca651fcf3e061412e9e435f84a1
- SHA512 58a6a024194161c26b675a4e94176fa4f2c486ddd99ef192ed06d7f9185632cc657a7a55fc3878730a11e307e8e7d5df1a7bd79bcad31f30dd3309315eef879a
- SSDEEP 786432:ed/KjU+mW8c06HlmvlFRkg4oYeQ7AiqPoNFYre9si9QXiE53CMrkBefsQEpZfBV/:6/ymWSBdk2YIjaFYaLgRC60QEp56
- TLSH T123C7335C17C808B9EC8225358965122453BA70C903E5CB9F8FD14BA6BF730FA7EB5762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
GPO-Hubv2.0.0.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
GPO-Hubv2.0.0.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
macro.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
macro.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target GPO-Hubv2.0.0.exe
- Size 53.4MB
- SHA256 753dc22f583efa21e7b8aa251880d681b1ed1408887cea1501419ce21b4ba358
- MD5 9715a94351632f01cff386679747cbc4
- SHA1 aaf2fb7ec2e75ca651fcf3e061412e9e435f84a1
- SHA512 58a6a024194161c26b675a4e94176fa4f2c486ddd99ef192ed06d7f9185632cc657a7a55fc3878730a11e307e8e7d5df1a7bd79bcad31f30dd3309315eef879a
- SSDEEP 786432:ed/KjU+mW8c06HlmvlFRkg4oYeQ7AiqPoNFYre9si9QXiE53CMrkBefsQEpZfBV/:6/ymWSBdk2YIjaFYaLgRC60QEp56
- TLSH T123C7335C17C808B9EC8225358965122453BA70C903E5CB9F8FD14BA6BF730FA7EB5762
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target macro.pyc
- Size 444KB
- SHA256 be19081081d4bf56dd9a7837803d9e3f2cd7397cf0ba87357249fe5782165b96
- MD5 e599aae69456046681fb6d6466ec479f
- SHA1 29a936fcd36643f824258a9aabeed992880f1448
- SHA512 76585869c9372d2006cd52c342fa91a2b08ac9c4a764065161dcb3cd26280b0df90291e335673c6d7ed12bbccf4da218dba82c5958f27a7504e63cec16c2f745
- SSDEEP 6144:98uGU8AH7VJwELpFGhLgHw5UWrNsRcOy37jPA2jUSr:98uGU8OVJHLpYNsRcO+4q
- TLSH T118A4F7857FB2C9B7FCA5B0B5441A3B5EF36A85613600C70762FB80B93E876908D625CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10