General
- Target GDI.exe
- Size 253KB
- Sample260910-cpakpscp9y
- SHA256 c060402d9ca0b8858547257d0ba763a47a0fa9f0ae16fc2b5c51650e902608ac
- MD5 8acf30850eea79d8a08726626a2718ad
- SHA1 0df31a06773f25174506fd58e4eb312c2163a68d
- SHA512 004b6275243873e4083e1fe037fc59ffa22f98ae1916ac994a8a3b71bb4e52cf0804dfb1ab5e3caf31d98a6bb55f1f2fc4369dd0c70a33d71dd5596d07c0c7c6
- SSDEEP 1536:atNTWyglbO/XSMsb6nZiCVcNoH0tOsenzPUSr3oWPqNkaqwSLmxp1xSs/fM3Y/kw:gNTsOAbTAJqxJS6fMom1fE9YoCRFy
- TLSH T1B9445B82FA86EC67C515023E8DFF8369323DF2E147875B0759793A751A1B6E0AC87203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GDI.exe
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
GDI.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target GDI.exe
- Size 253KB
- SHA256 c060402d9ca0b8858547257d0ba763a47a0fa9f0ae16fc2b5c51650e902608ac
- MD5 8acf30850eea79d8a08726626a2718ad
- SHA1 0df31a06773f25174506fd58e4eb312c2163a68d
- SHA512 004b6275243873e4083e1fe037fc59ffa22f98ae1916ac994a8a3b71bb4e52cf0804dfb1ab5e3caf31d98a6bb55f1f2fc4369dd0c70a33d71dd5596d07c0c7c6
- SSDEEP 1536:atNTWyglbO/XSMsb6nZiCVcNoH0tOsenzPUSr3oWPqNkaqwSLmxp1xSs/fM3Y/kw:gNTsOAbTAJqxJS6fMom1fE9YoCRFy
- TLSH T1B9445B82FA86EC67C515023E8DFF8369323DF2E147875B0759793A751A1B6E0AC87203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies file permissions
-
Drops desktop.ini file(s)
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory