Overview
overview
10Static
static
7Skiioh's P...EE).7z
windows7-x64
3Skiioh's P...EE).7z
windows10-2004-x64
3Skiioh's P...ks.bat
windows7-x64
1Skiioh's P...ks.bat
windows10-2004-x64
1Skiioh's P...ks.bat
windows7-x64
1Skiioh's P...ks.bat
windows10-2004-x64
1Skiioh's P...ks.bat
windows7-x64
1Skiioh's P...ks.bat
windows10-2004-x64
1Skiioh's P...ks.bat
windows7-x64
1Skiioh's P...ks.bat
windows10-2004-x64
1Skiioh's P...ks.bat
windows7-x64
7Skiioh's P...ks.bat
windows10-2004-x64
1Skiioh's P...ks.bat
windows7-x64
1Skiioh's P...ks.bat
windows10-2004-x64
1Skiioh's P...Me.txt
windows7-x64
1Skiioh's P...Me.txt
windows10-2004-x64
1Skiioh's P...ub.exe
windows7-x64
10Skiioh's P...ub.exe
windows10-2004-x64
10Skiioh's P...ub.ini
windows7-x64
1Skiioh's P...ub.ini
windows10-2004-x64
1Skiioh's P...64.exe
windows7-x64
10Skiioh's P...64.exe
windows10-2004-x64
10Skiioh's P...gs.vbs
windows7-x64
3Skiioh's P...gs.vbs
windows10-2004-x64
1Skiioh's P...Me.txt
windows7-x64
1Skiioh's P...Me.txt
windows10-2004-x64
1Skiioh's P...ol.exe
windows7-x64
7Skiioh's P...ol.exe
windows10-2004-x64
7out.exe
windows7-x64
out.exe
windows10-2004-x64
Skiioh's P...ol.ini
windows7-x64
1Skiioh's P...ol.ini
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
11-05-2024 16:53
Behavioral task
behavioral1
Sample
Skiioh's Performance Pack v2 (FREE).7z
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
Skiioh's Performance Pack v2 (FREE).7z
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Skiioh's Performance Pack v2 (FREE)/(1) Run This First SkiiohTweaks.bat
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral4
Sample
Skiioh's Performance Pack v2 (FREE)/(1) Run This First SkiiohTweaks.bat
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Skiioh's Performance Pack v2 (FREE)/(2) Input Delay SkiiohTweaks.bat
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral6
Sample
Skiioh's Performance Pack v2 (FREE)/(2) Input Delay SkiiohTweaks.bat
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Skiioh's Performance Pack v2 (FREE)/(3) FPS Boost SkiiohTweaks.bat
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral8
Sample
Skiioh's Performance Pack v2 (FREE)/(3) FPS Boost SkiiohTweaks.bat
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Skiioh's Performance Pack v2 (FREE)/(4) Power Savings SkiiohTweaks.bat
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral10
Sample
Skiioh's Performance Pack v2 (FREE)/(4) Power Savings SkiiohTweaks.bat
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Skiioh's Performance Pack v2 (FREE)/(5) Cache Cleaner SkiiohTweaks.bat
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral12
Sample
Skiioh's Performance Pack v2 (FREE)/(5) Cache Cleaner SkiiohTweaks.bat
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Skiioh's Performance Pack v2 (FREE)/(6) Network Tweaks SkiiohTweaks.bat
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral14
Sample
Skiioh's Performance Pack v2 (FREE)/(6) Network Tweaks SkiiohTweaks.bat
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/ReadMe.txt
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral16
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/ReadMe.txt
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/Wub.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral18
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/Wub.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/Wub.ini
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral20
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/Wub.ini
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/Wub_x64.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral22
Sample
Skiioh's Performance Pack v2 (FREE)/(7 WUB)/Wub_x64.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/Defender_Settings.vbs
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral24
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/Defender_Settings.vbs
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/ReadMe.txt
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral26
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/ReadMe.txt
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/dControl.exe
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral28
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/dControl.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
out.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral30
Sample
out.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/dControl.ini
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral32
Sample
Skiioh's Performance Pack v2 (FREE)/(8 DControl)/dControl.ini
Resource
win10v2004-20240508-en
windows10-2004-x64
General
-
Target
Skiioh's Performance Pack v2 (FREE)/(2) Input Delay SkiiohTweaks.bat
-
Size
50KB
-
MD5
8f095f28dc40da100080de16a1893bb5
-
SHA1
c55689a7086ca40732ef90815a6a561c4ebdfad7
-
SHA256
043597ee99fec3d546bff45e2d14557998e4c94e358a8986e5d500ca463e2605
-
SHA512
2e996ab04b81951ac3f246b1b6efd5a147ba9b1ca3127ee3593ccda36012bd415b9004601fa0cc32f27c6b765f4db2c589db7d87e67fa831b5c651a37ad6d7f8
-
SSDEEP
768:9TTlgASfto9l56CPRPoiZAS6Yg14oHSpEykfI9YCY1YhuAXmgAdcbbDqQXeS0AZA:p20ZI4g5
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 12 IoCs
description pid Process procid_target PID 1516 wrote to memory of 2612 1516 cmd.exe 29 PID 1516 wrote to memory of 2612 1516 cmd.exe 29 PID 1516 wrote to memory of 2612 1516 cmd.exe 29 PID 2612 wrote to memory of 2996 2612 cmd.exe 30 PID 2612 wrote to memory of 2996 2612 cmd.exe 30 PID 2612 wrote to memory of 2996 2612 cmd.exe 30 PID 1516 wrote to memory of 1456 1516 cmd.exe 31 PID 1516 wrote to memory of 1456 1516 cmd.exe 31 PID 1516 wrote to memory of 1456 1516 cmd.exe 31 PID 1516 wrote to memory of 1560 1516 cmd.exe 32 PID 1516 wrote to memory of 1560 1516 cmd.exe 32 PID 1516 wrote to memory of 1560 1516 cmd.exe 32
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(2) Input Delay SkiiohTweaks.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:1516 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c chcp2⤵
- Suspicious use of WriteProcessMemory
PID:2612 -
C:\Windows\system32\chcp.comchcp3⤵PID:2996
-
-
-
C:\Windows\system32\chcp.comchcp 7082⤵PID:1456
-
-
C:\Windows\system32\cmd.execmd /c ""C:\Users\Admin\AppData\Local\Temp\Skiioh's Performance Pack v2 (FREE)\(2) Input Delay SkiiohTweaks.bat" "2⤵PID:1560
-