Overview
overview
7Static
static
3AutoGpuAff...ty.exe
windows7-x64
7AutoGpuAff...ty.exe
windows10-2004-x64
7AutoGpuAff...te.exe
windows7-x64
1AutoGpuAff...te.exe
windows10-2004-x64
1AutoGpuAff...64.exe
windows7-x64
1AutoGpuAff...64.exe
windows10-2004-x64
1AutoGpuAff...64.exe
windows7-x64
1AutoGpuAff...64.exe
windows10-2004-x64
1AutoGpuAff...le.exe
windows7-x64
1AutoGpuAff...le.exe
windows10-2004-x64
1AutoGpuAff...64.exe
windows7-x64
4AutoGpuAff...64.exe
windows10-2004-x64
5AutoGpuAffinity.exe
windows7-x64
7AutoGpuAffinity.exe
windows10-2004-x64
7bin/Benchm...te.exe
windows7-x64
1bin/Benchm...te.exe
windows10-2004-x64
1bin/Presen...64.exe
windows7-x64
1bin/Presen...64.exe
windows10-2004-x64
1bin/Presen...64.exe
windows7-x64
1bin/Presen...64.exe
windows10-2004-x64
1bin/liblav...le.exe
windows7-x64
1bin/liblav...le.exe
windows10-2004-x64
1bin/restar...64.exe
windows7-x64
4bin/restar...64.exe
windows10-2004-x64
5Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 02:37
Behavioral task
behavioral1
Sample
AutoGpuAffinity/AutoGpuAffinity/AutoGpuAffinity.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
AutoGpuAffinity/AutoGpuAffinity/AutoGpuAffinity.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/Benchmark.DirectX9.Black.White.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/Benchmark.DirectX9.Black.White.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/PresentMon/PresentMon-1.6.0-x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/PresentMon/PresentMon-1.6.0-x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/PresentMon/PresentMon-1.8.0-x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/PresentMon/PresentMon-1.8.0-x64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/liblava/lava-triangle.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/liblava/lava-triangle.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/restart64/restart64.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
AutoGpuAffinity/AutoGpuAffinity/bin/restart64/restart64.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
AutoGpuAffinity.exe
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
AutoGpuAffinity.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
bin/Benchmark.DirectX9.Black.White.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
bin/Benchmark.DirectX9.Black.White.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
bin/PresentMon/PresentMon-1.6.0-x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
bin/PresentMon/PresentMon-1.6.0-x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
bin/PresentMon/PresentMon-1.8.0-x64.exe
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
bin/PresentMon/PresentMon-1.8.0-x64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
bin/liblava/lava-triangle.exe
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
bin/liblava/lava-triangle.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
bin/restart64/restart64.exe
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
bin/restart64/restart64.exe
Resource
win10v2004-20240426-en
General
-
Target
AutoGpuAffinity.exe
-
Size
9.5MB
-
MD5
7ff1b350471b74b4d1761346ced3bf4e
-
SHA1
f22183fe77d1718350262f70d324c5c6e3872ae0
-
SHA256
b15e43031731b76a403b2a3caf193fd1ad4fafe77b1e550b473a1f4d4839b29d
-
SHA512
00304d72dd0ba76c8b11d93e847e69267371bb6b40e082fec91590dbd258427a89272507d64f38883b1248972f5c2ea3f875932582f62ecc8b020ede0164add0
-
SSDEEP
196608:1sz0sKYu/PaQVBlibbtc19onJ5hrZERkB2WZufOuD9LjjNWKKy1IrpDhm:qQVBl8btc19c5hlERA2WmfDZ3URoUd
Malware Config
Signatures
-
Loads dropped DLL 11 IoCs
Processes:
AutoGpuAffinity.exepid process 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe 1916 AutoGpuAffinity.exe -
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
AutoGpuAffinity.exedescription pid process target process PID 868 wrote to memory of 1916 868 AutoGpuAffinity.exe AutoGpuAffinity.exe PID 868 wrote to memory of 1916 868 AutoGpuAffinity.exe AutoGpuAffinity.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\AutoGpuAffinity.exe"C:\Users\Admin\AppData\Local\Temp\AutoGpuAffinity.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:868 -
C:\Users\Admin\AppData\Local\Temp\AutoGpuAffinity.exe"C:\Users\Admin\AppData\Local\Temp\AutoGpuAffinity.exe"2⤵
- Loads dropped DLL
PID:1916
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
99KB
MD58697c106593e93c11adc34faa483c4a0
SHA1cd080c51a97aa288ce6394d6c029c06ccb783790
SHA256ff43e813785ee948a937b642b03050bb4b1c6a5e23049646b891a66f65d4c833
SHA512724bbed7ce6f7506e5d0b43399fb3861dda6457a2ad2fafe734f8921c9a4393b480cdd8a435dbdbd188b90236cb98583d5d005e24fa80b5a0622a6322e6f3987
-
Filesize
43KB
MD521ae0d0cfe9ab13f266ad7cd683296be
SHA1f13878738f2932c56e07aa3c6325e4e19d64ae9f
SHA2567b8f70dd3bdae110e61823d1ca6fd8955a5617119f5405cdd6b14cad3656dfc7
SHA5126b2c7ce0fe32faffb68510bf8ae1b61af79b2d8a2d1b633ceba3a8e6a668a4f5179bb836c550ecac495b0fc413df5fe706cd6f42e93eb082a6c68e770339a77c
-
Filesize
84KB
MD5b89b6c064cd8241ae12addb7f376cab2
SHA129e86a1df404c442e14344042d39a98dd15425f7
SHA2560563df6e938b836f817c49e0cf9828cc251b2092a84273152ea5a7c537c03beb
SHA512f87b1c6d90cfb01316a17ad37f27287d5ef4ff3a0f7fd25303203ea7c7fa1ed12c1aef486dc9bbb8b4d527f37e771b950fa5142b2bac01f52afbfdbf7a77111d
-
Filesize
123KB
MD54d13a7b3ecc8c7dc96a0424c465d7251
SHA10c72f7259ac9108d956aede40b6fcdf3a3943cb5
SHA2562995ef03e784c68649fa7898979cbb2c1737f691348fae15f325d9fc524df8ed
SHA51268ff7c421007d63a970269089afb39c949d6cf9f4d56aff7e4e0b88d3c43cfaa352364c5326523386c00727cc36e64274a51b5dbb3a343b16201cf5fc264fec8
-
Filesize
158KB
MD56e396653552d446c8114e98e5e195d09
SHA1c1f760617f7f640d6f84074d6d5218d5a338a6ec
SHA2565ddba137db772b61d4765c45b6156b2ee33a1771ddd52dd55b0ef592535785cf
SHA512c4bf2c4c51350b9142da3faeadf72f94994e614f9e43e3c2a1675aa128c6e7f1212fd388a71124971648488bb718ca9b66452e5d0d0b840a0979df7146ed7ae5
-
Filesize
1006KB
MD5b8ed5687a2c94bdc9f296397960a5ba5
SHA15df50ccbf84ad3d3e39c9a0268d8ac70a191d919
SHA2568e842e19cc3584af7009f414189b0f103a34c5f21477ba953869a5abf50e2624
SHA512f61a8e30ca783fa07ad8bf8fcbe8bf600e674edae9fc870ed4953d43f4b9a8843a1eb081269e98bcc2441b4c9324c531c29e6857a32425c4baf7280fc28a29a8
-
Filesize
32KB
MD5eef7981412be8ea459064d3090f4b3aa
SHA1c60da4830ce27afc234b3c3014c583f7f0a5a925
SHA256f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
SHA512dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016
-
Filesize
4.0MB
MD53cd1e87aeb3d0037d52c8e51030e1084
SHA149ecd5f6a55f26b0fb3aeb4929868b93cc4ec8af
SHA25613f7c38dc27777a507d4b7f0bd95d9b359925f6f5bf8d0465fe91e0976b610c8
SHA512497e48a379885fdd69a770012e31cd2a62536953e317bb28e3a50fdb177e202f8869ea58fc11802909cabb0552d8c8850537e9fb4ead7dd14a99f67283182340
-
Filesize
691KB
MD5597955a07be4ae08f3b09adbf996fa83
SHA13817e541646fd3cdd7a8256a1260f6edfe7dd0c0
SHA256ddfc515aea27ec414cfc84bef385711c82f0618f482df9d262c490226d7fa9d7
SHA512485efaecb8ea5b2d4644d9ab0927b636f7ab6d660da04b088e26452a28b5b11bccee9724cb625a7d5bde3fa5909aa32f3568909965439a06d3dfc0b7e345c941
-
Filesize
139KB
MD5f60da44a33910eda70d838d7635d8fb1
SHA1c35b4cf47349888384729386c74c374edb6f6ff3
SHA25613934599ff931f97e8eac6106dc67d54609befd0b0e653b46f6c25b18830c572
SHA5123c57ed384c23c89f99708bdf688ebd28629e84df8756e7b64dfa8b6e0b52beefb0c62de820f2c72e5679b7632279dcb414a781cfd2c5c9654d09d9da24fa17b3
-
Filesize
1.1MB
MD53b337c2d41069b0a1e43e30f891c3813
SHA1ebee2827b5cb153cbbb51c9718da1549fa80fc5c
SHA256c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
SHA512fdb3012a71221447b35757ed2bdca6ed1f8833b2f81d03aabebd2cd7780a33a9c3d816535d03c5c3edd5aaf11d91156842b380e2a63135e3c7f87193ad211499
-
Filesize
138KB
MD557be78d0f2a66700600266ebc86c9b3c
SHA1a47987d476cb9c76698890405e0b65aa10e07169
SHA2569ab2b3a63bf2d0ef5ff3412c0b000756677810f3aa60a10bf62bb92c9f9b6ee2
SHA51298c2a2e48adfae6c7d3c7d6731e688a27fc1eb6675760ab44f78e4eedebf88b09e425d21baf5674d402f9cfc9d7ebc6d643f8c763c8db5f6b1f8bf83681c256c