General

  • Target

    GamePingBooster.zip

  • Size

    2.8MB

  • MD5

    e2f51a9eaa72f402cb8a764db9fcb0b9

  • SHA1

    5da5376297de60209ddbabb2bc4d2137f1bc315d

  • SHA256

    e1a876852a42d221b5bb7a2d934e50c31d2006f9df258dab589b0078cc6c63f3

  • SHA512

    2df93b443c79d86cce2a972f79d8551c4a0bb0787598b91920f0494cc763a68dd85bcbfcd6a05ba34dd78a9871f4aef539ade4d12cbfd28f8e651259712b1039

  • SSDEEP

    49152:j5HI1RyyVI5lBb4JoeJZCKntUkvUY4DYlEgQtPkYgOAr73MNDdrJM:jVmfAb4J/Lx14axQF/AMpdrJM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • GamePingBooster.zip
    .zip
  • GamePingBooster/AGIpHelperClose.dll
    .dll windows:6 windows x86 arch:x86

    d75e28e95315ad872c1c816e98caee7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • GamePingBooster/Google.Protobuf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GamePingBooster/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    ae94e7e35747470c61bf70e22ccd5d26


    Headers

    Imports

    Exports

    Sections

  • GamePingBooster/Setup.exe
    .exe windows:6 windows x86 arch:x86

    e233f55b2e1564f7081c0ffda9a4bede


    Headers

    Imports

    Sections

  • GamePingBooster/SharpRaven.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GamePingBooster/System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GamePingBooster/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GamePingBooster/System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GamePingBooster/System.Runtime.InteropServices.RuntimeInformation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • GamePingBooster/System.Windows.Interactivity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • GamePingBooster/default.adg
    .zip
  • settings.json
  • GamePingBooster/drivers.bin
    .zip
  • win10/arm64/adgvpnnetworkwfpdrv.sys
  • win10/x64/adgvpnnetworktdidrv.sys
    .sys windows:6 windows x64 arch:x64

    cbf47800d303868761e2034f1321176c


    Code Sign

    Headers

    Imports

    Sections

  • win10/x64/adgvpnnetworkwfpdrv.sys
    .sys windows:10 windows x64 arch:x64

    077094715544389bf54e310c8b11c707


    Code Sign

    Headers

    Imports

    Sections

  • win10/x86/adgvpnnetworktdidrv.sys
    .sys windows:6 windows x86 arch:x86

    1d3203cb7d9080b27cd9f8223f02e9e1


    Code Sign

    Headers

    Imports

    Sections

  • win10/x86/adgvpnnetworkwfpdrv.sys
    .sys windows:10 windows x86 arch:x86

    c0a82f589a0d0b6fb1643b7b9884c370


    Code Sign

    Headers

    Imports

    Sections

  • x64/AdguardNetLib.dll
    .dll windows:6 windows x64 arch:x64

    160dec295202d5687e2ce3f8bd37db14


    Headers

    Imports

    Exports

    Sections

  • x64/AdguardNetReg.exe
    .exe windows:6 windows x64 arch:x64

    26e34ece1f736427d823c5d6f6dc8231


    Code Sign

    Headers

    Imports

    Sections

  • x64/adgvpnnetworktdidrv.sys
    .sys windows:6 windows x64 arch:x64

    cbf47800d303868761e2034f1321176c


    Code Sign

    Headers

    Imports

    Sections

  • x64/adgvpnnetworkwfpdrv.sys
    .sys windows:10 windows x64 arch:x64

    0fd6894d0de85d75397d3b75aaf01ba4


    Code Sign

    Headers

    Imports

    Sections

  • x86/AdguardNetLib.dll
    .dll windows:6 windows x86 arch:x86

    488fefdeb53d07f4d420d2dc3d286c20


    Headers

    Imports

    Exports

    Sections

  • x86/AdguardNetReg.exe
    .exe windows:6 windows x86 arch:x86

    472e9e70d7ef69c5adcff44a47e03e32


    Code Sign

    Headers

    Imports

    Sections

  • x86/adgvpnnetworktdidrv.sys
    .sys windows:6 windows x86 arch:x86

    1d3203cb7d9080b27cd9f8223f02e9e1


    Code Sign

    Headers

    Imports

    Sections

  • x86/adgvpnnetworkwfpdrv.sys
    .sys windows:10 windows x86 arch:x86

    97bf97936903442b69e15810dcd7d19b


    Code Sign

    Headers

    Imports

    Sections

  • GamePingBooster/wintun.dll
    .dll windows:6 windows x86 arch:x86

    85d06bb8dccb5014c9a7a3146af5ef48


    Code Sign

    Headers

    Imports

    Exports

    Sections