b685b47dfbe00008448ac95d6596d6475b48be8a402e65142945c0db545b3b4c

Sharing

Copy URL Twitter E-mail

General

Target
GPUMonitor.gadget
Size 220KB
Sample260912-125hlsweld
SHA256 b685b47dfbe00008448ac95d6596d6475b48be8a402e65142945c0db545b3b4c
MD5 da2b3d086a3c15550326aa48094eb0e9
SHA1 1d19bbe9b969f300dc3e125f0d14f7263df4d37f
SHA512 ac692961d87063c282257cc2b72af0bb287dd95d2cd5a955b60fd8c171c9f82d581ff111d27fd129ecf4970b59ee7ed9a41cd18cef516535e0deac3c5e9d2a1c
SSDEEP 6144:0iqucC5LpoT/ypOjA5O4idLMeTf4wz44snF:omdyQOtMeTf4wz44snF
TLSH
T1072413B8E3E708DFC1F0F239744E8755E63D1B688A78B752588520160FE3F9815AE395
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  GPUMonitor.html
- Size 6KB
- SHA256 5d8df368987d41904f187cd6a6a3ebaf25cdd77f2125c2968b97d37d50817dc7
- MD5 ace3a11fb2bd2c79cafc5ab590537aab
- SHA1 8840e249b3017c6c440877f603b6bb3cbe748198
- SHA512 06f7b180b7469f660c4901596ef9f35a7480e035f0536e354be1db26f16dde704c2002b41c6ced8d92301ded50cf99427c47d84d6f8d12e66fb86ba9612cb7e6
- SSDEEP 96:cvVSaxAKNcHvTXiL1bSAT/+YmZ1SeToBK1UUT0F+1KGTAfC11NTiBdS151I1v:CdL4i1mMbM1h1z1N1u451K
- TLSH
  T1F4D1A610D1EED816B37A9181BEE89F4FC909C74783468F44B2B412A3B4D7858AD9F57C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  GetGPUInfo.dll
- Size 82KB
- SHA256 a7126a2685d835cb9590902101bb4b71c075eec2baa02331d5ab00f96c6d60f7
- MD5 9550944361414b28c32df5d4bc6f9e0a
- SHA1 e24da0cf42c4acf03935ae67f76263f08c1a1f46
- SHA512 fb87dd33b36c7b3db0e21893e11d50d4489c53abe050d536747d897d746a898d24657bcc04afb85ed05c820bc1e542976d4ab2d2b12de2aecd6b4a7412e24d77
- SSDEEP 768:ZZ2ZHbJA6wctfsZcYD2UMeRW7XDmxV28FYmBi50CFxbf9diHpR7Zb0cTvqc47tOi:ZZwAO4D2uRW/0Uv/JdiHpZZb0/xOk/
- TLSH
  T18B833911FA4AD072D7C90CB5D857BB568E65ADA2CFD161C37B963EDA08306D1BF38202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  GetGPUInfo64.dll
- Size 94KB
- SHA256 f45156a899798ac861e3faaf08a731ae5844dd2f50e5134381252a0cae0589ce
- MD5 4614ea84a4c59ad099782b6ca8f7a878
- SHA1 1debc73f2820e637c6dd3f2c86c07046730558e8
- SHA512 78e4d2d7b3b917f80f806eaeb8a73ae31e7fdec2ee159dbd3ed7721c182be6fb3f824506176f3b2a3e5cdee3d19b9f4c4d075045f6719470e87f8351777d4690
- SSDEEP 1536:JZgoFQr9b7+miCly1sY5Bkq79yDY0fjcSMAhubSFYdDa:JZDF4GmiCTY5aq79yDnQSrubSFm
- TLSH
  T128931912BA69906BC61A9679CA138905DB72FC914F5277CF27902EDD1F72BD0AF39300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral5 behavioral6
- Target
  Settings.html
- Size 87KB
- SHA256 296f4521dfa8c716a5124eb40f90f13b5b28f2967300cb5d6b6a3a4fad8645b4
- MD5 dc1b4f680b4caaf8f8a796d7e8bbf477
- SHA1 461a885bb90d82e3796721ca4094b4b447a7f4b5
- SHA512 6e4f6eb9430081f7150c2d01cee6402b3013d875cf20a1cb21a50e9fc8c903f6f448258717ed7da33709e63e9b61f97da86a66638a396251581bfac41bd2e87d
- SSDEEP 1536:0tw+SsSo4EQAmwLK4EQhWwJIw5uwZIwb6wQ4w+6wt1qwIi4EQA+4EQ7M4EQaq4E9:x+v4J4lN4J4O474o
- TLSH
  T1B8930829ACC8D523537344D60131E64FFD6A61A3D7959BAA72EE2BF31F70DB84803494
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  js/GPUMonitor.js
- Size 133KB
- SHA256 18bf39f8d99e8aff84ec61a432713606c5f474d136fe9666b42d460e1e798926
- MD5 2dcad893b3035625b026ae59ab1b62b0
- SHA1 dbc7b28dcc777fb1e7fc23dc452370a91826b259
- SHA512 06c2827766a1e89c3388edb89c1f2f1f3612a9584e9cb53887137100cab1a22ead810641a5b8a62d369be0e59856c415329a22a2563b9a2a56a4b70bf6ed8b8e
- SSDEEP 3072:f3xEDQ0ap5/vClFzIwN9NSjFoBDR4WFQsaZOxc1BFNP6TZrys6WlMf8VwRINr4RW:f3Yap5/vClFzIwPNSjFoBDR4WFQsaZOT
- TLSH
  T107D37DDD4921B2195EA882656B6C8A0DFE20CBDB83834349BDBA84F67C15C8471F5F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  js/jscolor/jscolor.js
- Size 29KB
- SHA256 8a0958e0abc71d319d163e61bf766e36d76c964dbb3ac1998af111c7c8658535
- MD5 a26701f49bf33da8dc48f3431e5f4f42
- SHA1 bc15b47e03c44230f2a403a5c3c0e182020a158a
- SHA512 a8797c26858b9f08c951b2bed00c7e10fb213d2bc68d9ba57de92b9228b0aa12b5390a762af83aacf0c43fa8f467631d013a6ffc8b059a445bc1737f61528b9b
- SSDEEP 768:E8zBzlMhlBlvX+Q4q4H4V4W4Z4q8KNqulRZw:1BzEl2Q4q4H4V4W4Z4qHNRO
- TLSH
  T110D294ACB39F251F82A3335C143ADB99ED7ED4368212A26D74AD90B436A4E110376DF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  js/languages.js
- Size 821B
- SHA256 5fdd2907555ba7cedda1f8ada7b6978babd858a16039b85be39920daa7b4912d
- MD5 e559f50170f8df24840135aa166df831
- SHA1 8041111ae06656ca45d98ffc60a2e463acf2d234
- SHA512 aa28d33360717bed37c0b27f0fca136d5abc5d3b62626af31f77e269c872aa941066ad2ae4b5675cb4ded7a17ee27487d75f7943c3c4bb30e1e8261a908548d7
- TLSH
  T11B01F8C0EE230892DDDF8E53349B2CD27858D0FD3009E9AF8CAA0209CA02618C2F6127
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  js/library.js
- Size 3KB
- SHA256 6d679b704bca62617648e074d4d9b8fd4ba7d6e4f9780fa3543a61f2e380ef79
- MD5 6a14f15688234cd3ceb913f84d20ab64
- SHA1 7261a89407b5e005169b5131be1fb9b97505a8ce
- SHA512 d8947b9ae28347d6ffbc02427c94389b2bab3bc797c8134b24cf063ea0239ee64838cfb3abaa5df8bce96969070ac7919949760f2389f992c9053996d3688488
- TLSH
  T14171F0011053C2B99DA7E396230F801BB9D209A5A520DFBFF7E9C270AD0A65C9175EF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  js/mainlanguage.js
- Size 37KB
- SHA256 06b23bbebfa105a2a768bacd92683966cb9c270a5d2fa3c7b499759168b59f65
- MD5 96d786c8c5dcb2189682d4133c5df225
- SHA1 83cc14643591dfca1e38d9866da3622d0ff51ed2
- SHA512 c18edd29dce208d5018ddb42fd565a603c1aa35908f8b2eefd0e04ca470d5832fe28d9a4c21e75c7b70ecf150a1fec96169a2181be4c6ebb52598d2c803df827
- SSDEEP 768:8sX2RMOgBZj7QRQC/KgPglD+XkEtpFw+CXnEpiSA+IvT6GxBRh6eYOCWoXasSJ9C:8k2RMOgBZj7QRQC/KgPglD+XkEto+CXC
- TLSH
  T1D303A806B283E3E495E7E32C719527820C6A35127533DBE83779C18921E58BBD6E076F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  js/settings.js
- Size 44KB
- SHA256 5b603a018153e202c7fe6250fd1768ccc94e1f5e873527a2190dbe33d007d48e
- MD5 f6ca18afc43c3438edcb47e4485eaad3
- SHA1 98e73f7cc2be74bf06c03f3a56367fb02d658ae9
- SHA512 cba27d58fe93ce4040b4ca5ca7047bbd7aad276f74ff2cb5cfa40fb0e4b569dcd0026794b4824b4eedc17c691188cf231c7066f33c0f865f08f172bec003c510
- SSDEEP 768:/Thw8bQuIHDUH13p78qkLyO6sl9Bg0/NgdS+4QbqGHzt7DYYf3rn1FiR/VhMdIs+:7hw8bQuIHDUH13p78qkLp6sl9Bg0/Ngs
- TLSH
  T131230F7FB445187D9ABE0637A564E309EEB19760C812AFE0FECC48248C5598CC3E7B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  js/settingslanguage.js
- Size 145KB
- SHA256 eb7674f53a1480dca4bb85468f7c695e0e4a298c979287c0e301fe50f373948f
- MD5 e7f66aed2f8fa05d99322445acf7e90c
- SHA1 783c838ad06ab5a01513730052def293f5d1144b
- SHA512 dec5331d577c2610d107303c98042ac9a3d80550779b6e3c151b40bc503bf96b8355ae9326a44884d68a7c3e8480c677a4aa0a8e7baeb2f85183f8f93edeb0c7
- SSDEEP 1536:tdD3aWcnYE3ZYYLEvxWEk3vRc+Q2q9twyOavStzEgJwqWRVug2OWDq:aoKvRpjctw2qzh6nVug2OWDq
- TLSH
  T16CE33C1D334B70E951FBDF09D184256F2859E4BABB02EDA93509E3AB35A787403E481F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22