General
- Target GeForceNOW-release.exe
- Size 170.4MB
- Sample260912-x2gj1atalb
- SHA256 b482e731b5f358738da115da32f2a93af5667da4ee202fcb372f0cbaf0f93e49
- MD5 7f397922e7b026d03593aa03f7ad439d
- SHA1 3b6ebf9d7d736c0d164482bf1b3e02c671c5fc1b
- SHA512 5771fd870033a351dfe683d90f3bdbb6c0563e3b2607afa31b8fb5561a138bde9833ceca293b332ddb803172f5250c736ef5b315f160693b4b7f80555618acc9
- SSDEEP 3145728:/dv2++Cew9w+oCPflQu1pTFYoEZkoXC/0WKFLPr8CLeVk2rFBlv/5qg:lvDx1nLHBQZdX+A7eV1b/gg
- TLSH T14588333DB6EC40FEC99795B8C8755F53E2E07CE6522190160BE4BE2E3FBB0454A189C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
GeForceNOW-release.exe
Resource
win11ltsc2024-20260911-en
27 signatures
900 seconds
Malware Config
Targets
-
- Target GeForceNOW-release.exe
- Size 170.4MB
- SHA256 b482e731b5f358738da115da32f2a93af5667da4ee202fcb372f0cbaf0f93e49
- MD5 7f397922e7b026d03593aa03f7ad439d
- SHA1 3b6ebf9d7d736c0d164482bf1b3e02c671c5fc1b
- SHA512 5771fd870033a351dfe683d90f3bdbb6c0563e3b2607afa31b8fb5561a138bde9833ceca293b332ddb803172f5250c736ef5b315f160693b4b7f80555618acc9
- SSDEEP 3145728:/dv2++Cew9w+oCPflQu1pTFYoEZkoXC/0WKFLPr8CLeVk2rFBlv/5qg:lvDx1nLHBQZdX+A7eV1b/gg
- TLSH T14588333DB6EC40FEC99795B8C8755F53E2E07CE6522190160BE4BE2E3FBB0454A189C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Downloads MZ/PE file
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1