Overview

overview

8

Static

static

1

driver_boo...up.exe

windows7-x64

4

driver_boo...up.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    driver_booster_setup.exe

  • Size

    27.6MB

  • Sample

    230501-xd58fsfe51

  • MD5

    ccc48304afa2e7c58492babc297db8a4

  • SHA1

    decd98730cf34e1567965f6fb7085569fc1053e8

  • SHA256

    e02061a4626f950b41d89c21e9a780f8aee5c5ddda7880b753d660db09117910

  • SHA512

    79bd4dda233b714ecd6746c5f78f9d441852e333202fc74da6430d23d7dc1deadebb5a5608da63ac63ee0891a99ee259d3498d58ac59621226d8bf7862de4b04

  • SSDEEP

    786432:e9ThknZ2E7r7s8OoqHeTfy3UjKt1tdypqVEB8YFj:e9ThknZ2+9OFHe7qO0dhEh

Score
8/10
discovery

Malware Config

Targets

    • Target

      driver_booster_setup.exe

    • Size

      27.6MB

    • MD5

      ccc48304afa2e7c58492babc297db8a4

    • SHA1

      decd98730cf34e1567965f6fb7085569fc1053e8

    • SHA256

      e02061a4626f950b41d89c21e9a780f8aee5c5ddda7880b753d660db09117910

    • SHA512

      79bd4dda233b714ecd6746c5f78f9d441852e333202fc74da6430d23d7dc1deadebb5a5608da63ac63ee0891a99ee259d3498d58ac59621226d8bf7862de4b04

    • SSDEEP

      786432:e9ThknZ2E7r7s8OoqHeTfy3UjKt1tdypqVEB8YFj:e9ThknZ2+9OFHe7qO0dhEh

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks for any installed AV software in registry

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks