General
- Target GDI.exe
- Size 253KB
- Sample260910-cww3aatfrh
- SHA256 c2122285001932e5b2f8cc4282c9fc0600b5d4d973e6d6b05bab0b3926558f60
- MD5 fa564797fcb67a11849bfc33e0e4d485
- SHA1 4cf5901c760573311d8f5e5841b10822125266d7
- SHA512 5666f924b060f921b382df40d1708db250649918da4e474ac6f7404ff3c73a3d1c032188463cb516cb789ae0cc38408a2770be26496a5c8267616dfb5daf9656
- SSDEEP 1536:0tFITWyglbO/XSMsb6nwiCVc4oH0tOsenzPUSr3oWPqNkaqwSLmxp1xSs/fM3Y/h:uFITsOAbDAJqxJS6fMom1fE9YoCRpy
- TLSH T1BC445B82FA86EC67C515023E8DFF8369323DF2E147875B0759793A751A1B6E0AC97203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GDI.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
GDI.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target GDI.exe
- Size 253KB
- SHA256 c2122285001932e5b2f8cc4282c9fc0600b5d4d973e6d6b05bab0b3926558f60
- MD5 fa564797fcb67a11849bfc33e0e4d485
- SHA1 4cf5901c760573311d8f5e5841b10822125266d7
- SHA512 5666f924b060f921b382df40d1708db250649918da4e474ac6f7404ff3c73a3d1c032188463cb516cb789ae0cc38408a2770be26496a5c8267616dfb5daf9656
- SSDEEP 1536:0tFITWyglbO/XSMsb6nwiCVc4oH0tOsenzPUSr3oWPqNkaqwSLmxp1xSs/fM3Y/h:uFITsOAbDAJqxJS6fMom1fE9YoCRpy
- TLSH T1BC445B82FA86EC67C515023E8DFF8369323DF2E147875B0759793A751A1B6E0AC97203
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies file permissions
-
Drops desktop.ini file(s)
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory