Overview
overview
10Static
static
3Optimizer.rar
windows7-x64
3Optimizer.rar
windows10-2004-x64
3Optimizer/...ps.cmd
windows7-x64
1Optimizer/...ps.cmd
windows10-2004-x64
1Optimizer/...os.cmd
windows7-x64
8Optimizer/...os.cmd
windows10-2004-x64
8Optimizer/...01.bat
windows7-x64
7Optimizer/...01.bat
windows10-2004-x64
1Optimizer/...02.bat
windows7-x64
4Optimizer/...02.bat
windows10-2004-x64
1Optimizer/...S..bat
windows7-x64
7Optimizer/...S..bat
windows10-2004-x64
1Optimizer/... 2.bat
windows7-x64
1Optimizer/... 2.bat
windows10-2004-x64
1Optimizer/...AM.bat
windows7-x64
1Optimizer/...AM.bat
windows10-2004-x64
1Optimizer/...op.ini
windows7-x64
1Optimizer/...op.ini
windows10-2004-x64
1Optimizer/...ar.bat
windows7-x64
7Optimizer/...ar.bat
windows10-2004-x64
1Optimizer/...ct.exe
windows7-x64
6Optimizer/...ct.exe
windows10-2004-x64
8Optimizer/... 1.reg
windows7-x64
1Optimizer/... 1.reg
windows10-2004-x64
1Optimizer/...os.lnk
windows7-x64
3Optimizer/...os.lnk
windows10-2004-x64
3Optimizer/...te.bat
windows7-x64
10Optimizer/...te.bat
windows10-2004-x64
10Optimizer/...ca.bat
windows7-x64
7Optimizer/...ca.bat
windows10-2004-x64
1Optimizer/...�O.bat
windows7-x64
9Optimizer/...�O.bat
windows10-2004-x64
1Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
25-04-2024 21:44
Static task
static1
Behavioral task
behavioral1
Sample
Optimizer.rar
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Optimizer.rar
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/+fps.cmd
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/+fps.cmd
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/Desabilitar Serviços.cmd
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/Desabilitar Serviços.cmd
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/EXECUTAR APOS SEMPRE QUE LIGAR O PC/LIMPEZA 01.bat
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/EXECUTAR APOS SEMPRE QUE LIGAR O PC/LIMPEZA 01.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/EXECUTAR APOS SEMPRE QUE LIGAR O PC/LIMPEZA 02.bat
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/EXECUTAR APOS SEMPRE QUE LIGAR O PC/LIMPEZA 02.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/FPS..bat
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/FPS..bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/Otimizar RAM 2.bat
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/Otimizar RAM 2.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/Otimizar RAM.bat
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/Otimizar RAM.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/desktop.ini
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/desktop.ini
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/limpar.bat
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/limpar.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/memreduct.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/memreduct.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/01 Desativar DVR 1.reg
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/01 Desativar DVR 1.reg
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/Deletar Arquivos Temporarios.lnk
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/Deletar Arquivos Temporarios.lnk
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/Desativar windows update.bat
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/Desativar windows update.bat
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/Limpeza automática.bat
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/Limpeza automática.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/OTIMIZAÇÂO.bat
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Optimizer/Pack Optimization/1. Otimizar Windows/OTIMIZAÇÂO.bat
Resource
win10v2004-20240412-en
General
-
Target
Optimizer/Pack Optimization/1. Otimizar Windows/+FPS/Otimizar RAM 2.bat
-
Size
715B
-
MD5
330113e518075fbdd0d3d8d8b0070b09
-
SHA1
fdbf0cd4533c5c230d7652739251d31941ee219d
-
SHA256
c8a50f056e5e72765dd62f44ae092740bb4d062f08c3656ab2d80b9ef6db1c4c
-
SHA512
b55602d9c81c7e2092c37951abad6f132629a76e2142a57f275aa9bb4b50ef6220491bcaba9b9339c19f49ca1460bd7cad0c5e5a3c7451704c0af13a44a20c7b
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
cmd.exedescription pid process target process PID 1440 wrote to memory of 3156 1440 cmd.exe mode.com PID 1440 wrote to memory of 3156 1440 cmd.exe mode.com