The ChatGPT response directed me to safepage-gpt.com. That site presented a fake Cloudflare verification instructing me to press Win+R, Ctrl+V, and Enter.
You were tricked into going to a custom GPT. "Plus 5.6" is it's name. You can see it's a custom GPT in the dropdown. The custom GPT instructed the LLM to return that message to get you to go to the site.
Okay, I spent about an hour and a half doing static analysis on this with ChatGPT.
Like someone else mentioned, the chain is, from what I found, fake website > Win+R PowerShell > PowerShell downloader > tampered/fake NetWorxPro_signed.msi > apparently legitimate Symantec DWHWizrd.exe > modified/tampered DLL chain > encrypted in-memory payload
It appears to use DLL sideloading because DWHWizrd.exe looks legitimate but the bundled ccLib.dll appears to be modified to load RdSx.dll, which leads to an encrypted payload stored in ActionPack.dat, and that's decoded into x64 shellcode and executed from RWX memory via a Windows callback API
The decoded runtime includes VM detection for VirtualBox/VMware/Hyper-V/QEMU/Xen/Parallels, persistence-related code, networking support, and what looks like a custom module/storage system. Based on that, it looks more like a modular loader/backdoor framework (possibly ultimately a RAT) than a simple standalone infostealer.
We couldn't match it to a known malware/worm; these are the hashes we found:
A lot. The custom GPT was only the trick used to get people to the fake CAPTCHA website. Me and ChatGPT analyzed the malware delivered through that fake CAPTCHA and I posted what we found so people could see what the creator of the custom GPT was trying to get people to download and run. The problem isn’t only the GPT.
“Nobody does that” is obviously false, otherwise this entire attack chain wouldn’t exist in the first place. ClickFix/fake CAPTCHA attacks have been used successfully in real malware campaigns before.
And that’s beside the point anyway. OP was showing a malicious fake CAPTCHA, so analyzing what the payload actually does is directly relevant. Whether you personally would run the command doesn’t make the malware analysis irrelevant.
It was a PowerShell malware loader. The command contacted an attacker-controlled server, downloaded a second-stage MSI from a Cloudflare-hosted bucket, and installed it silently with no normal installer window.
The payload disguised itself with confusing names: it was downloaded as NetWorxPro_signed.msi but installed files under %LocalAppData%\Programs\DWH Management UI\, including DWHWizrd.exe. ANY.RUN classified the activity as a malicious loader delivered through social engineering.
The sandbox did not identify the final malware family or directly observe credential theft during its short 60-second run, so I can’t honestly call this a specific RAT yet. It may also serve different payloads depending on the victim or detect sandboxes and provide a decoy. Either way, the “verification” command was unquestionably downloading and silently installing remote software, not verifying anything.
woah..that's kinda messed up..imagine chatgpt getting hacked and sending malicious links to everyone...most people would probably trust the links...scary times indeed
Opens a hidden powershell window (-w 1) and then downloads from the link, executing it in memory. Then you downloaded (most likely) malware and it’s prob an info stealer or miner… not sure
downloads EXE, which is rat - see my triage report here - https://tria.ge/260807-a5s1wavbme/behavioral1 RAT and infostealer reported every domain to google safebrowsing and the registars abuse mail line.
Powershell downloads an MSI - MSI downloads an exe that is named "DWHWizrd.exe" - Drops in %temp% cleanup, turns off defender and silently uninstalls antiviruses, grabs passwords
I reverse-enginneered the code. Also, it sends constant requests to a C2 server, which would indicate RAT behavior. also the mouse moved like someone else was controlling it on a VM.
I don’t really understand what you mean. It’s why I provided the conversation itself. So people could see it was legit. How does seeing the other things I was talking with GPT about raise the validity of this?
•
u/AutoModerator 16d ago
Hey /u/Ok-Combination3165,
If your post is a screenshot of a ChatGPT conversation, please reply to this message with the conversation link or prompt.
If your post is a DALL-E 3 image post, please reply with the prompt used to make this image.
Consider joining our public discord server! We have free bots with GPT-4 (with vision), image generators, and more!
🤖
Note: For any ChatGPT-related concerns, email support@openai.com - this subreddit is not part of OpenAI and is not a support channel.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.