Extracted

• • Target

    GamePingBooster.zip

  • Size

    2.8MB

  • MD5

    e2f51a9eaa72f402cb8a764db9fcb0b9

  • SHA1

    5da5376297de60209ddbabb2bc4d2137f1bc315d

  • SHA256

    e1a876852a42d221b5bb7a2d934e50c31d2006f9df258dab589b0078cc6c63f3

  • SHA512

    2df93b443c79d86cce2a972f79d8551c4a0bb0787598b91920f0494cc763a68dd85bcbfcd6a05ba34dd78a9871f4aef539ade4d12cbfd28f8e651259712b1039

  • SSDEEP

    49152:j5HI1RyyVI5lBb4JoeJZCKntUkvUY4DYlEgQtPkYgOAr73MNDdrJM:jVmfAb4J/Lx14axQF/AMpdrJM

  Score

  1^/10
  behavioral1

• • Target

    GamePingBooster/AGIpHelperClose.dll

  • Size

    96KB

  • MD5

    b33bef46898db3038d755e2881ab6d6a

  • SHA1

    e2969a1d6cdb3def6f79a3a9a2b88f4bf0845de4

  • SHA256

    d0b0c67bb766002d4be097ced6b53edc94fd423b6d8f50355be48add0626a35d

  • SHA512

    f96e9825c292d479be8ac0716c0a813b984dd16cef9f7f0958fdc49c5e26e10f0e21480435b6bdb563a99e0889b9d148798f610e234c701175bd50bc2847e9ab

  • SSDEEP

    3072:oh9yC1PmpV/2fgBbcl1UKmkwQl2dMZ8w0:cyJJ2fUdkZ2dMl0

  Score

  1^/10
  behavioral2

• • Target

    GamePingBooster/Google.Protobuf.dll

  • Size

    401KB

  • MD5

    a93c82719e98c382d81bc0dcd99ad402

  • SHA1

    8814b631fd15c35e737db42bc908791302496a83

  • SHA256

    6e5db014ae75b455a97f7f161507ae1058f489333126f30607e6e534d3ddea82

  • SHA512

    60d897ef434bda51921e111a39b50b4e2b832c8dc3a8444a4b36a2a9d898ea200d990ea2edfab02689b4c1a03d1cb9110428727dac13d70318b850d4289529f2

  • SSDEEP

    6144:KwDm4/Ib3J5SSPHGFVtwb/0V0qnPEEVwoVTqcQc+QZyiu69hOKbBfM0gF2:Kw6oCrSSPHlbmMEzTqsFO+

  Score

  1^/10
  behavioral3

• • Target

    GamePingBooster/SQLite.Interop.dll

  • Size

    1.2MB

  • MD5

    eaebd32500264123ef3f2a4cd2aee629

  • SHA1

    ee7976940c545759bbb0a0047f0fa6cd970c30f5

  • SHA256

    a7f95a7eed84db9cf419c03a7c05231fdedf3a042fd10259e6938eedbda3a1ac

  • SHA512

    fcfdf839d7bfa920483314e3e3ab0b0c83669883a6c5c7abd5966fd7ca14940bb07dab219dc22031941e4155b2f4fc7bd8fb76c639b191dce052df7f537da62b

  • SSDEEP

    24576:RKE4r0RaYdKYR7KtLqUmZRDiJC7Z2CQiQYZh5YAIQLs:8hr0RZ5RGtA0KpcYZ8tEs

  Score

  1^/10
  behavioral4

• • Target

    GamePingBooster/Setup.exe

  • Size

    493KB

  • MD5

    979119c0ff7fe623c1115a1a965507d2

  • SHA1

    26bda6aa1aef1243aae1da88e986af6c8e990fd1

  • SHA256

    84b587ec425746bfa985048f3c189fd96f485759e5cc78d90c8287764b08ae17

  • SHA512

    d716badbfd48216a51b0bc0a1b49ce7011d047c8609a2f0cdd25273e4c72222704cdd6071bce1fdc9ba46b042206525dd0fba0e76306ac44c996c4874986da3d

  • SSDEEP

    12288:Wx36Rr9pdHMJtOmz448EY3lfEX9ZNNp4bZu32pteE:WR67HHMbrE4BYWqZ06A

  Score

  10^/10

  lummastealer

  • Lumma Stealer

    An infostealer written in C++ first seen in August 2022.

    stealerlumma

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral5

• • Target

    GamePingBooster/SharpRaven.dll

  • Size

    96KB

  • MD5

    1bd677bea16cf6490c6cf35c0d1c0174

  • SHA1

    dd7b027aa51433c824e99cac7b7a8c5c27a28a3f

  • SHA256

    d738249c61afd4dba39302a79422d3a34ec9b3807c9f5f973d1a385a0ff44955

  • SHA512

    ee4b0dc1c9d862eb597227c8860739ac87269656e952d4609c7befce4ea08345e3e5693b1d95f1c6c70ec79f681d31321798ef0eac52954fbeaf44764a265a82

  • SSDEEP

    1536:zKKw4TfSgLOwanNdGzV9P23rl0LnITwa8yNpgwoIhAm7:zKKBrbanrp0k38yNumr

  Score

  1^/10
  behavioral6

• • Target

    GamePingBooster/System.Data.SQLite.dll

  • Size

    337KB

  • MD5

    ae8e6840bcfce9ab0f6db77a5f60ca1a

  • SHA1

    0981e864217c2ec5c67ced185458010e4bedac6f

  • SHA256

    dafa4a7e1186e5fe8223317f654795b9142d72917006edad03ee3d1de5162bc6

  • SHA512

    b3c3ea043cc8a286c9b7684fa7402534e2ab61d3ea9605cbf65ef88e1af13a2efa4e4911c2bfc1518b33a315d098e72cebc04f8b47967adf6cffa2ad7765f5a2

  • SSDEEP

    6144:o4xtlRVuJ4v4pFNFaFeFOFwcGF6cmFWc0FWc8cIcKcUFJFpcNcHc7cbchFFc5cb2:Vljdv4pFNFaFeFOFwcGF6cmFWc0FWc81

  Score

  1^/10
  behavioral7

• • Target

    GamePingBooster/System.Memory.dll

  • Size

    140KB

  • MD5

    2bc5de386a4297144781d15b8e812b63

  • SHA1

    ae6b19d49b413f1549b3540a9fbba00c1e8b3d27

  • SHA256

    9c266080fb5f31e02a5005b91657093bd8c1faed23102e021a8be283c1753461

  • SHA512

    e4d43c871af5c03392d2fb139fdf10c2f2da2f1d6fe0edd089e3e30369d6d350727b483c98868626f81d680400b44ee4d328e475b0017bfdeb38cdb44a8b4d4b

  • SSDEEP

    3072:w3XFz0qjCIIMAxlUXwKovHO420kf1AeqjQPdo:i0qjC5RgOHO420kf1s

  Score

  1^/10
  behavioral8

• • Target

    GamePingBooster/System.Runtime.CompilerServices.Unsafe.dll

  • Size

    23KB

  • MD5

    a5aa80f49ad64689085755ab1ebf086e

  • SHA1

    27e88cf0d2b34ea91efaa5cef9a763ee2722c824

  • SHA256

    a79e1c30e9308afe4d680f0bfb82de3e8c1fe94aeca453ec4092c3ed4789ae6b

  • SHA512

    f3dbd77e3a2ec3915b34d1387388abad45c99459ce03c06dc9a83d04f751b837c7b56cf9b4b7630f7fcd897a1d8057fce4cf761b1dc140a3928431b22b9b5b82

  • SSDEEP

    384:RgTOodhW1YWxvyPrF0GftpBjHGe1c4HRN72t4jmAlMK5:RgbSza+i9X1B2tjG

  Score

  1^/10
  behavioral9

• • Target

    GamePingBooster/System.Runtime.InteropServices.RuntimeInformation.dll

  • Size

    32KB

  • MD5

    82deb78891f430007e871a35ce28fac4

  • SHA1

    4e490d7ec139a6cde53e3932d3122a48aa379904

  • SHA256

    2f141b72a2af0458993e27559395d8a8cdb0b752d79b1703541a61e728b55237

  • SHA512

    e47f741aa9153cfafc5f6be39987d7c7d8fb745566c4d9a4525b9f30cbe6df450d27bcdf8998dec7af824a7be0f5e9eecad2a39072b956a6320d23d94a0da71a

  • SSDEEP

    768:vn1VM0JrpNWDcIh6leOiDFIFBYp1+ziBEBMf:vnvXYcIh6yFIFBYpczyEBMf

  Score

  1^/10
  behavioral10

• • Target

    GamePingBooster/System.Windows.Interactivity.dll

  • Size

    39KB

  • MD5

    3ab57a33a6e3a1476695d5a6e856c06a

  • SHA1

    dabb4ecffd0c422a8eebff5d4ec8116a6e90d7e7

  • SHA256

    4aace8c8a330ae8429cd8cc1b6804076d3a9ffd633470f91fd36bdd25bb57876

  • SHA512

    58dbfcf9199d72d370e2d98b8ef2713d74207a597c9494b0ecf5e4c7bf7cf60c5e85f4a92b2a1896dff63d9d5107f0d81d7dddbc7203e9e559ab7219eca0df92

  • SSDEEP

    768:6MazwAgR8/XJ665bKZdxuB8DCuL5enM7JxKjuMlZCZN+R0E7E:63wBccZdxuB8mQen6JxKjrlMZgR0Eo

  Score

  1^/10
  behavioral11

• • Target

    GamePingBooster/default.adg

  • Size

    382KB

  • MD5

    f07c5034ad2e6a558c2860bfca7a03c8

  • SHA1

    238e0c897b38fc997dcaccd9e86a31f82b2f6134

  • SHA256

    15f0d40786f57a7d7ee5d9340d30619d095c6e253bf29d9e67a9308d585ee0ee

  • SHA512

    5eee5a753390359e45d2bc8ffcb31734de54d741853fb768cf7ac7c350d3a2c49dd1a02f7c683cd9ca7f837dee40fdfddf2571a7e10c9fb4de37b96bd892c6cd

  • SSDEEP

    6144:uDQOJu1JhcQvp81fI/ujDpTZx1iawc5vviDQhfNrsCIhd/qLZ2aS6yYvN:KDu1McK1f8mBZ7ipyvQQxNXY/uZ2NYvN

  Score

  1^/10
  behavioral12

• • Target

    settings.json

  • Size

    1.5MB

  • MD5

    79e070f1adae730a712eee4458b26ce7

  • SHA1

    b6c0ae2d80e0b6d80ecd94f7f559251b19644e32

  • SHA256

    c2d0c5011cfb6d22932c146ca8049d90a99535293a25e3b2b721b903bbb8e664

  • SHA512

    eb242cde8b9562da4d39102b5b03ed5a0cca0a23ed9d6ccb1cb8ec24b549e132c6563d079952b7388f19e11372600e097857f4adb5a073d07196a1aeac3f4b42

  • SSDEEP

    12288:jtYBdjYQmo2UaAzMvj7vO5JX+twDPiW6eHuXO6:QjY2zz0mJUwDPiWVHuXO6

  Score

  3^/10
  behavioral13

• • Target

    GamePingBooster/drivers.bin

  • Size

    675KB

  • MD5

    65f89ae32162b4efac226d5467e497b8

  • SHA1

    48e984ee61aa8bc784bceb6b8c6d299cfc242747

  • SHA256

    6e5460c99e6560907631da75b8ea05907ca7f96642bbc67fa2f716d167322682

  • SHA512

    d9f5948d66fc4f6baa468ef21c486d44aee75326c0fe716223941130052fb1b189a6b015537057bf7dff4cabb87dc782b7dc36bef460b31bf1e0e018fed94a06

  • SSDEEP

    12288:NmGvX8tUvATtZE1pC9yTGaybFwgPzIXDV9iMrjAH2GitVdLMejYjoJwNsy/ie67K:f8UY5ZE3+yT2+gbIRrMWGihMoYjoJPyX

  Score

  1^/10
  behavioral14

• • Target

    win10/arm64/adgvpnnetworkwfpdrv.sys

  • Size

    87KB

  • MD5

    b9046874416213d7f50ea5fa12b9f126

  • SHA1

    f0541b777ad5c75f8677596fc9c157bd0b487481

  • SHA256

    5669f36bb1a0e14a97efa29853167362f68f5245dbea028d40a36af2af2a98f4

  • SHA512

    7392ab3183e85a82551b1a1a926bc018e8245ba8cb67bd7ff003480ddcabc9024a62757de243cdb6c25d6c8de8d143514e29cdcc70a365e3fe10b42469f4220e

  • SSDEEP

    1536:NUG/BZjN0mjh7ytizGk5/nmFpFogt27Ko4khj7nzg:7Jsmt7Erk5vmFD4uo4khP8

  Score

  1^/10
  behavioral15

• • Target

    win10/x64/adgvpnnetworktdidrv.sys

  • Size

    68KB

  • MD5

    5161148fc6c342ceb58bdd408558ba6a

  • SHA1

    d97b73d55a9034b59cd86f317cc1ed3e61c1d285

  • SHA256

    8b2587ab8d5df3392b1ac401c67da8d44782af14ef6236b85aa41bae71a82b75

  • SHA512

    6f33dce9cfc18d7c78baf3855c182b513b51b7ebc413ed2f721acda57b5b8002c9e2507cdf496da135fa08c1d4e259175975d624ba1922c3cab6fe33253622be

  • SSDEEP

    1536:6meMMbowsIlzJwVx1iMUKLIMDWc2+isRzzT:0MMbows0+3UiBSc2+i+nT

  Score

  1^/10
  behavioral16

• • Target

    win10/x64/adgvpnnetworkwfpdrv.sys

  • Size

    86KB

  • MD5

    9ee35c250ba86b8ae84bd3191d439704

  • SHA1

    3a8774623bf4889ac85bd3ad52ef4635acdb61ac

  • SHA256

    98966d81b6216b10eab575464a3ff468a64e88b5eb3f1c4d690b61ebce374d15

  • SHA512

    a550357b6418637b20731d512cd01b292bf45dfe984396e4232443333e5a5c13f0d98c580f6ecee79c0ed598fb34a27e228061eb909ef85d8fccc84dfae2df4f

  • SSDEEP

    1536:QSbmApxilJL5i2weqqkfKvY2YIjxmsqOqYYBzED:Q0mxlJ9wF2YIjRqOqtBID

  Score

  1^/10
  behavioral17

• • Target

    win10/x86/adgvpnnetworktdidrv.sys

  • Size

    62KB

  • MD5

    d26770d2129b47851b6416f34106bc38

  • SHA1

    7407adc705b582d5d16be6a51f87fc450f3c3dbb

  • SHA256

    a4544fb275ef24250cbe9ef543c776a3fd7d640668ca0ace8bfe6147e4fbf2d5

  • SHA512

    9b623f53b6e5bc23fc4604d315ca5da2ba9978c62ee5f356df668c17953bfe353bea766bf26022cdd0b31c7ee9e9a5816a2d8ab2a12bcdc93d08e435b6b63fb7

  • SSDEEP

    768:R8u6CP6qmM5xjbTR+bOvMgCiJ4gy5NMWW8SlCK8FH+MZmKmBCE2pKb79+lD13Fq0:WupPPXnT+O0qjS9xRFHXVpaR+lBgz+

  Score

  1^/10
  behavioral18

• • Target

    win10/x86/adgvpnnetworkwfpdrv.sys

  • Size

    75KB

  • MD5

    62293e3fbb48d550f2462535318085c0

  • SHA1

    1305c805b798ad53dda9e87946e31d90e13f0179

  • SHA256

    31c0e5dd2772440b8a90975ef46627a930a544a6c1a4d37607b5228cb839fac6

  • SHA512

    3f679d51782b2369afc97e2a50f773ad03784758a58978e6e993a02d059a5d9a2262c8479e3693ce8697f772196953c306667f889dd7396cb0d564d2553c6a7e

  • SSDEEP

    1536:behsCjc0UWH+dzHo1m4d+chKMiHSRZDdDkIDR7b6yt2M/fEia5uXxs0zzl:ksL0Uq0z2vzLdIY/Ba5uXxln

  Score

  1^/10
  behavioral19

• • Target

    x64/AdguardNetLib.dll

  • Size

    189KB

  • MD5

    9cf42f1052da8feed8168da8eddeffc3

  • SHA1

    23acaaae9a1341cbea21ffce3cb3cd1cef372537

  • SHA256

    680d62b89c2ab35aa3447e4a2f08af494e366b5b34a61624a8d76bb06db1eb47

  • SHA512

    eac314bb79e5d67933795daf37ceaae50061faa387346fc0189906ff3185003d35d11d93a4c1e27c8f69e96688b66232b2629d16812c7763bd37b88cfc5fe5c5

  • SSDEEP

    3072:FaePQR5B4S6+yeIvssuYVFauKlcZF4GNcIh1qyN6zt/lgyXb/DxHHef90RwqI7nL:Fa/9xrk4UzFKt9geDZnC3FS

  Score

  1^/10
  behavioral20

• • Target

    x64/AdguardNetReg.exe

  • Size

    134KB

  • MD5

    180db6db24b3bbcddfced4caf0aff350

  • SHA1

    da95846eab13879f7a0981d4472b70a902f8ea35

  • SHA256

    23e4da36bd80ea522af1461ecd0ae53547a5a74c420757917c22bf2f57ae094d

  • SHA512

    4285cc950331c23f0a530227f187696aeb28c1f537d57f9455753229bcb50bd99a499c5c3c4974d7353b2dcade09b17eeed470223ff6c00a63ef8cb5023aa7c4

  • SSDEEP

    3072:fasICZgQOElzM1bogAt+Grg3VK3APuid7scU8ElyZ8wCE:cBQOAzgh2+Gso3S7lB

  Score

  1^/10
  behavioral21

• • Target

    x64/adgvpnnetworktdidrv.sys

  • Size

    68KB

  • MD5

    5308ebaa5926794a06e3a5404468be04

  • SHA1

    77ee15365893762d79ed53f9f70b4014954b472f

  • SHA256

    30c5efda065230b30f6d189e885f38109a6c527fbd9ed8589d0fde0d96f9aaff

  • SHA512

    917221d4b67a71a55a065f51b5e3d7ca9806ac58175abe586bc79e9a8767375a5cd5e3701ddd5a5b73177f48403b1b34f51b265751b87c86a31898f2a4f8cae6

  • SSDEEP

    1536:vmeMMbowsIlzJwVx1iMUKLIMDWc2+jZzT:rMMbows0+3UiBSc2+V3

  Score

  1^/10
  behavioral22

• • Target

    x64/adgvpnnetworkwfpdrv.sys

  • Size

    112KB

  • MD5

    bf41ac9f328735de868d6588d9e48fb0

  • SHA1

    cb5a0fa55ea67af55e870393e5e50978b7bb2898

  • SHA256

    86d8f52872accf6138ef5bc25b673bb497590522954aa24364c0b8656189e6e0

  • SHA512

    42fe8aa715f68fff126843d4a3cd1825aa9580c7d15a928da8cb2b1188bc8020872833bd052b6f9e8e99077d840d99963095d5d086f80b6eca6380f45b9d6e39

  • SSDEEP

    1536:lxPZmTe9lNsfC0Yld1Ovze7WfxBJ5eOsN2aPvCW5uH4u0Zs8ixGUPKekz4nhWsm6:lxP1gfvgr7+JEhB54kEATy23N5Q

  Score

  1^/10
  behavioral23

• • Target

    x86/AdguardNetLib.dll

  • Size

    153KB

  • MD5

    9764179c72a035e6ccc29680545fead1

  • SHA1

    045427470197282e40866ca68abf2309d1db07ba

  • SHA256

    455d8b058331f3db8233c7c6823985163a82e3cebb26cac46c3838fcbf7efa86

  • SHA512

    2305f28629d61ca03849388b5e11a7e90838b167188dad0c5f7859510a50c6ac4348f06c6dabcc231a4266c216d917cbcadb55b6d40e540115bd1fc6e058e0d9

  • SSDEEP

    3072:EuaQTk1wgCa7uW+Y+IJE+edVtDvIDBJF0EDQns6fvC9cjo2iwJtsykZHqxO34aGo:wnCa7uW+Y+IJE+edVtbIDBJF0Ecns6yj

  Score

  1^/10
  behavioral24

• • Target

    x86/AdguardNetReg.exe

  • Size

    114KB

  • MD5

    bdc0a9f9abc82deb07821839962e983d

  • SHA1

    651e607e6beb1f9aa611cc528b6b3044d96f88a0

  • SHA256

    471ce337f138d79cda22459e192fc881fb2c9a81ac35b0b5c3c39876514bae59

  • SHA512

    1d38d4ff1528f4b115932a7653818e0c0be45cd82b296ec96b7d13d195e88e14ef82aa418a0dee2612ab6c37237930e499afac5415ee94e0e780111f99ede518

  • SSDEEP

    3072:0TeTvrHDveq8ERAoVKR0K2W05wmYAdyoMwCH6pKHgZ8wP:KODjveTHoeLtAHIaKAlP

  Score

  1^/10
  behavioral25

• • Target

    x86/adgvpnnetworktdidrv.sys

  • Size

    62KB

  • MD5

    88f2e941419818af7a7dcf333e396615

  • SHA1

    7d53a0ea22b060e5c83fe2504964d9b3a7a1cf63

  • SHA256

    548611a82d21227a782967be05e91727112c7aad955a1b15f412795b9735eb92

  • SHA512

    1ef593f310ead31c45797c02bfd0a9f9e8e9dcd4f86aaec0aadf57e71426bfa6309f2fa3fee703044fe759c6b88e6bbf6ed220e7d4959e75be36fc1311ab882c

  • SSDEEP

    1536:RupPPXnT+O0qjS9xRFHXVpaZJXRsd9zvg:kpPfCAjS9xRVqZJXRW9c

  Score

  1^/10
  behavioral26

• • Target

    x86/adgvpnnetworkwfpdrv.sys

  • Size

    105KB

  • MD5

    d4bdf2b0a8da9d9a7a18aaa3d3008afa

  • SHA1

    c715e8c49c271a9af19c30f7d893206232dc028e

  • SHA256

    52815a4c1cc5607e83672c03703c9d416add3f73c457462ebc3a243700c6937d

  • SHA512

    7a45cb1690e5c28f84d2382c0dd59354d1efaa107862bfe6477a4aaf062aefff981ae371c6e79267cbcbf4fa92c7653821a6d4772a025d7c0fabb81a8a43b85f

  • SSDEEP

    1536:rW7og58vRQlGwSeYKSGAF3ZMUVLEs+kzA:q7og5mRQwwSQoFpMUVLr8

  Score

  1^/10
  behavioral27

• • Target

    GamePingBooster/wintun.dll

  • Size

    538KB

  • MD5

    fa0391a861b949de22e0a59c6faeaed5

  • SHA1

    d451ef2224b27938eeaa97ad26f75b686d86082e

  • SHA256

    d694fa46ab4cfebcb2632d094c7aa97278eef2f8052438621766d863ae98a931

  • SHA512

    e44889d0f3044f90962181d7d8787076f70b6e1d7974150f16f83d33a97f1fc4bdd0c7a38eee7a1ea8e8dc4f66ed37dab004f2855dd361de8fdd4ae6e08fa048

  • SSDEEP

    6144:w89wYsjDrSwf2IHHVVsWhC2njQtIu1MlXwiMnnyDQhWmnU4Dm:jjsjDrSOFaWFnjQtIzlXwiW/U46

  Score

  3^/10
  behavioral28