Analysis
-
max time kernel
291s -
max time network
299s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
19-04-2023 13:14
Static task
static1
Behavioral task
behavioral1
Sample
Smart Game Booster 5_noOVL.exe
Resource
win7-20230220-en
General
-
Target
Smart Game Booster 5_noOVL.exe
-
Size
3.1MB
-
MD5
2e3b1d6727fc76a1aa43636ff0704c3b
-
SHA1
ce5ad0ccb03acdd90ced16fedcf1a25fd081bc4b
-
SHA256
15712faa167b2a875b7d28c8aa7e1d2c107877eb633c8de3f49b2e2faf9e7b94
-
SHA512
6e9622818017eae868d6a8a28527bff470fa55292b7e3bf4ae3e08821cbb54136a5a5aae06ed6cca1704dbd220e55a5a869e2b4d28127d568b2b23aece0995a5
-
SSDEEP
98304:Mf8TSU/kWiZL5IH6R+N84p+AVHPSMhD0:y8PvPH6R+XJSMh4
Malware Config
Extracted
aurora
77.91.124.12:8081
Signatures
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
Processes:
Smart Game Booster 5_noOVL.exedescription ioc process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion Smart Game Booster 5_noOVL.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion Smart Game Booster 5_noOVL.exe
Processes
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/904-54-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-55-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-56-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-57-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-58-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-59-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-60-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-61-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-62-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-63-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-64-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-65-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-66-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-67-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-68-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-69-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-70-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-71-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-72-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-73-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-74-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-75-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-76-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-77-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-78-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-79-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-80-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-81-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-82-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-83-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB
-
memory/904-84-0x0000000001210000-0x0000000001B0E000-memory.dmpFilesize
9.0MB