6eb45ae31e76751c8aa71c5e5bdab01d7a848c447749591ddf74b340c58bdfd9

Sharing

Copy URL Twitter E-mail

General

Target
gpbc.zip
Size 49.4MB
Sample260930-w7tabayeng
SHA256 6eb45ae31e76751c8aa71c5e5bdab01d7a848c447749591ddf74b340c58bdfd9
MD5 01baba56c6703fb9755682f6a54134d7
SHA1 243939d47b4198a898ac5a8ae9cd72e1e9860ef4
SHA512 fa1a3e88ee4da5bbaf2d7c707ed1e7f95379308ee94f07aff696a9cda841f9ff135450de79b2c7bf068d48bafa6a3ed7389870c4271bd4e20ae58e7d281aa1c3
SSDEEP 786432:MUqBmbzq8rByM+cQqj7Bo4n+LeUjnQMDCnh4qLnCVIqDQT0qx1ngG:+q2893V7Bo4n+LJvmnh4onGCR1t
TLSH
T193B733F5E9DC4AB1C15BF679D5B27406F4EA2073033A88A669046FC49E9F3D07601F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  gpbc/404-error.html
- Size 20KB
- SHA256 c77b1841227ff0a6b89b98a6da804514c296a37998a9da9aa3ee5b105ce583b0
- MD5 26829465fe8654c83cc079f09d298c8e
- SHA1 a16090eede9eda45c3543a3560809b018e735aa8
- SHA512 3db82e9b4cd0a542aad53c62a02844698770522f1a9bd6d62ac0b2b654b560d9ec49e729c6fd360b5dee3c093cb12af5162479c6424bf869f3f7456994c1aa80
- SSDEEP 96:EaEHfsMduNdEahEKkmUyUNIVUbMVplarT1qZtoq4uVvydMFJ7H7m7alEABEBUdfs:8Cdnh7vgIKbkMEl8dMPGydfldCfU+l
- TLSH
  T1C7A2CE151CF8103B0152669A6E246B2E6F93D627DA1F2E0032FC2F995FD7F8ACD5311A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  gpbc/about.html
- Size 45KB
- SHA256 a4125eb64efcd4e1ca3ecded63d296c0d59e8de4729742ab90f2e0d3de32e46a
- MD5 be174185e7a7fe2db3037c41b0127201
- SHA1 4bb738dcfd678389c18e9b1349b912b037f35b3c
- SHA512 0a559dd9d1d1cabf8312c74ff9d0f583a506a0df279b403ed4d5a16bd578b0a4094b0b00d49b25ca81f5cf9068cda7dbaf3b1c4b6015e8736a3290e86d122ed9
- SSDEEP 384:OdnhbTgIQkMESwoJTmxyeQv6ST4+CtewUGfU+h:GnhQsM7pqY0IwpfV
- TLSH
  T1A7230F2128F8113B018290E56E646B1F6FD2E717DA1F1A1472FC1BD95FD3E8ACE27219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  gpbc/blog-details.html
- Size 41KB
- SHA256 a9b6b218dc6ee9c5a09a026892b3bd2d080256414f4b560f73b3d1411ab173c0
- MD5 5dbdea9ad65fcbc7d26c838fc2738a6e
- SHA1 73ffbb85b33cd77696a3aed55be380ab3c030292
- SHA512 5f18a9acf4e489da270543784e8e31e0c2e16e5d29a777e396716d6a41f1b573fdedf5a101b1da5d33f58efc8deb0a4a1e7f7bf08882a9afaf69cf9c67113771
- SSDEEP 768:onhEsM7onYOxS1F+WO9WetmNNcqTBO7IqGpfl:onhDkonYOxS1F+WO9Wp6Gpfl
- TLSH
  T1B613532118F811371693A1A57E246B2F7ED2D257CA1A1E0472FC5F9A4FD3F86CD2321A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  gpbc/blog.html
- Size 36KB
- SHA256 e832f9f59ef6033d632a87dc2b5fda467ba533443d33fe7a2e8eb0ef221d9aac
- MD5 11644e5bb1b04a0ff285a46e0ab7376a
- SHA1 729ded31c44b0ac298673d6c3a2bc31b629dbd81
- SHA512 998a1f0448edb5fde6144ef117aecc4eb7b2edbc8548e382e5b34622c58d3643a2ae9a26fbddbbe754550aab53af422127733e1a8b0c54f3f573044a0e7eacd0
- SSDEEP 384:bdnhbvgIQkMENLyRzPqTBO7BePeGUGfU+8:xnhksMALyRzPqTBO7I2GpfA
- TLSH
  T108F2111018F4213B0192A2A96E286B2F7E939657DA1F1F0472FC6F9A4FD3F46CD1311A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  gpbc/contact.html
- Size 28KB
- SHA256 98a1b87e171deed555e1c5dd1d8801d8d4149344d34a7adabb6115c723e12fa1
- MD5 f6db1980f6ba65d8c9586b79120ece3f
- SHA1 93797d2de2dd6f7badc553458589361b10e5ad7b
- SHA512 e8298d54ce666ba9839b32cbffd8e75d5ad90d065bfa5350126e854558bb5a89963737a7bcd1b4510f0bdbcf3f1912eb9640cc65c51b8d3750e8e0a28f27a324
- SSDEEP 192:28dnh7vgIKbkMEFzqnj+VutOuCBcXGhndMPwydfldCfU+/:Xdnh7vgIQkME+OuCLewUGfU+/
- TLSH
  T123D2BC2418F8203B019291A66E646A2F6FD2D627DA1F1E0432FC1FD95FD3F8ACD53619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  gpbc/courses-2.html
- Size 46KB
- SHA256 df9d87f7d741c11d40488e36d61118dccba795a12bee8957ec24d827e40ba2c6
- MD5 daac956685252c6681514306fb9c5f9d
- SHA1 56e08f64fe73f44af7c44eb8602524328a8b5032
- SHA512 8a51df194a728677f8052dd81c0c7d72269902c1ef6b3ef5262dc6d1be48c5322e31b2c87102b317ba3ae2ba653f7ae578a3a93f0f9880a6e38b29145ab3cdb4
- SSDEEP 192:Y8dnhzTgIKbkMEPpYz3v0CG72Oi+OK/3mCBcXGhndMPwydfldCfU+L:tdnhzTgIQkMEP72OICLewUGfU+L
- TLSH
  T1FF23A92108F9503702A2A1926E682F2B3FD2D617CA2A5B0532FC1FC85FD7E47DD63659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  gpbc/courses.html
- Size 30KB
- SHA256 fe525688a76663b8c97723cb55ced96660f008e473b85b01e1016567ee83d0a3
- MD5 0c581dfa24afdd2a368ff1ab585f9ace
- SHA1 276fb5840ad2ad91908cd7993ab46b281938f840
- SHA512 9c11beb59607f12fbd73fc558714da051ad57459bf18932eba3f7b17be6a484c209522bba646fa028262ff1e3b907dc65865ed9bfc06e6529fb1c7e13083bcba
- SSDEEP 384:jdnhzvgIQkMEb72OMk0TM05CLewUGfU+X:ZnhcsM6Kwpfr
- TLSH
  T133E2DA2118F8113B0192A1956D246B2E3F93D627DA1F1E0532FC2F995FE3F8ADD5321A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  gpbc/event.html
- Size 29KB
- SHA256 73aaa29fc4cf1c86324b601d213c8879fc8ca270ebe1e9e523a9d9114e715e9c
- MD5 27fe2278800e4a41243ad7fea64d2a13
- SHA1 4bf105aefa8874869f0183a760d7498c7c298b96
- SHA512 f8fd93a2e7d61cb6aac444a2f03c318a98b5de8c9e57e20b3c3c20e71478a589ba9e8b5ae6d533374bf19a13da0c37e09c6d5601dfd0aa766850a10fa905db9d
- SSDEEP 192:y8dnhTTgIKbkMEfMhShkhahkhIdbCBcXGhndMPwydfldCfU+K:7dnhTTgIQkMEfESMqMItCLewUGfU+K
- TLSH
  T12DD2CC2118F4113B0196A1956E246B2F2FA7E657DA1F1E4132BC2FD94FD3F8ACE5310A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  gpbc/faq.html
- Size 29KB
- SHA256 101c7888032c58ac8f30cea190201e3cc4534aed4e0f40b69c23b28f605399c2
- MD5 9daa2c52b65b8bbd34a6c778bda7719f
- SHA1 da987f580a4f8e9556a9a0a097c74f46901f0b88
- SHA512 d5b2df615a25f1359f41015ad5e279e5e4a9b15739680eab96eb9909a90af7a2e41c321bea9f6afb8abbc67b0d16264ea7850b10b07e73ece37554f8e6846aa6
- SSDEEP 192:hCdnh7TgIKbkMExuaYrUe/JSq+3hwCBcXGhndMPwydfldCfU+j:8dnh7TgIQkMEABGGCLewUGfU+j
- TLSH
  T1FCD21E2028F8113B0192A1956E686F2E6F92D317DA1F1E1472BC1FD95FD3F8ACD23159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  gpbc/fontawesome/webfonts/fa-brands-400.svg
- Size 675KB
- SHA256 7e98c48405d641defcbaa8836fcecc13320a44f5b74390dcea5851f67271cba6
- MD5 25ef90baf5df9e28198ccc2af49a258b
- SHA1 75d4ed710c456587a4e9447e5348eb6de9adcb20
- SHA512 46f90922f3e6f90f6dbf24e3269fa28600864351df6b5ce727750b0207f210b811f407915f76339c02fde4502e44c561a7f8862d451cb4e4f3c0771cf98937cc
- SSDEEP 3072:0xCv0Rzj36Ggr0JTQUHMzl7WkLHQ6TzFa2Pxtxqpch1UzXmSDaA:R6/qVP6/
- TLSH
  T1EAE4F15C93A4C2B8FBDB0EE98936BED6366B35FF39103254C278A56028727784C4D59C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  gpbc/fontawesome/webfonts/fa-duotone-900.svg
- Size 2.1MB
- SHA256 fa733e3ce1fe67291fa458a86fdeb47a983d6179516d1dd6e22f22b6bde42ccd
- MD5 4730ab7a623f8612a9d0c35581c6dd77
- SHA1 f0808af6ca9d85870a267f299358129d530e9f71
- SHA512 b72d8206c75fb11493b05827048983a83caa3de72392098e3a72d62aa58b0436d8cbf78e4b82559fdbbc8f310f4c6022d077fa463a23bdfb7e104111197f5f67
- SSDEEP 6144:KziAyzSfE1GTczAIjvHb/i1UdpixhckybzwZMo52510M:K6zt6s0M
- TLSH
  T1A8A5B8A8D350C6F897CB87D6CA393F612A9D61FE37143458C26865A04C367BD4ECE6C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  gpbc/fontawesome/webfonts/fa-duotone-900.woff
- Size 226KB
- SHA256 3879ae224832f685be89d3a19bca898bd4e630d972df8cb6615a057e2b4cb723
- MD5 7ea20ce6e9aff253b6c21d16d69d83d0
- SHA1 870404b8f4471356800ea1a2808df90128cbd3c3
- SHA512 e8007be09c3ff98728074395ac659dc2053f6e3e3c46b0d17949dee8bc2ba36fa28b48b91443134f87282b9588c182f08aff415fd75ad0aaac0539891673ac7e
- SSDEEP 6144:7Cg74T51iE+9DZceFwZ2IOBm2UfVj1GHoZRVJbB4CfUK4:eg749Al7L61GobBUK4
- TLSH
  T100342241C82A76390611FF820C7EF99FF663AC8046B542FE44D9C5316875B98AE278DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  gpbc/fontawesome/webfonts/fa-light-300.svg
- Size 2.0MB
- SHA256 86f8de9c426b8ce80e3bf2ab0365bebc224a2f567e6a834b16a4e2f595edf4fa
- MD5 182168aac33a32161bbbafa9bc290de4
- SHA1 1aac5faabbc603bcbc86eab233931534bde2a6aa
- SHA512 298f9f498bb4a5a529bc7125b1e556489c2b9ea2e2b7896c1332a7378d8eb65ccbc4cff7df507c51647c179a5a1e332d76e7dc26875e8b37a7bec1708e9d35fb
- SSDEEP 3072:AqvfpT6/xSL5EiJJ3NgusN56A34CKmAXWmW/8Rp6f9NOk9XNVYLUZ4Sc07To/yWR:2ORigW+NpCL0i6A1AhN
- TLSH
  T1F7A54369D360D1FCA7D64FD98A3A7E91269E76FF3A103124C278A4601C727BC4D8E58C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  gpbc/fontawesome/webfonts/fa-regular-400.svg
- Size 1.8MB
- SHA256 649573907c73912511e15f8a9b9def2f9f21ba43c430360a9b3876ea5c0a32d8
- MD5 fad44ae7f38c64464ac202d46788ff12
- SHA1 9b8f913ad110b791cb723b209efca9034164ac8c
- SHA512 1c4929dcdde08b898dc20046f44b6b0f7dd2d10ac9e754d86e9b82f84e620b420eb17b2910076ae1fbb3fb98edd2376c765d8fdf9a70cbbb1c386293400909f7
- SSDEEP 3072:cicbVikgDFNqqOuYWXSyIjDUrgBTvdpGAFbpCyhDynXWNgdM1BArrRfZMLPVZMLZ:n5UpCyhDy6cz5zZPId0R40H
- TLSH
  T1B4856568D364D1FCBBC64BD98A367E91269A75FF36103124C278B5A02C727BC4D8E58C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  gpbc/fontawesome/webfonts/fa-solid-900.svg
- Size 1.4MB
- SHA256 dc2f259f896a2093e12868515baa1d5c3922e62176bd8a5139cf34a2977cb3d7
- MD5 0cd39e0307a390a07edd62ea648c6489
- SHA1 8edd9dbf27351e2db2ca42b0e0e57d128ef40e88
- SHA512 377b4d2d6bf94be1fb505295fa6d835cd3b19823c52674364a4c523f3652f2b94d06777da67d26ea1653a165d87891af23437e90c876439626400810023a6e61
- SSDEEP 3072:YD8FoBCyKLFl74uQ8bG3ZcUNqm1rDK8/lVJ3Lx48j3rOkjvr48j3nWjhAjPa7uoN:hnJmzbxes25WGj
- TLSH
  T19165536CD364D1FCABC64BD58A357E91269A65FF36203128C278B5A02C327BD4DCE58C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  gpbc/fonts/dripicons-v2.svg
- Size 97KB
- SHA256 854da5317dee54902bc913d37c28ca980b4529f916ddcfde459ce133448011fe
- MD5 7d1e20ed0d50333f5dbb041e214fa85e
- SHA1 a40bdebaf59785aebf9cadc84707bc8083be6217
- SHA512 037e138d12b0dcd032eab6b6eee0683a498bf13c9949d35b62b85f27de7a56a13d8530058928393b582887dfce1d88ddbd4f747daec314cdd21cc48c3ac4bbee
- SSDEEP 1536:7Z5M57ZXWF3iNrkxt2JQFJwLAfNd8Fqyo3HDj9Xkqe9B:FS57Zk+rkxcUfNv3SqEB
- TLSH
  T12FA32024EF2E307E6BDB02414D7D61D5462CE2AB213D117A5AECD6F0460FD26AF1BE84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32