General
-
Target
unlockerFPSfix.exe
-
Size
7.1MB
-
Sample
240527-yv8kkshf36
-
MD5
85d00e7632bdea73c43b8cada80ca0ba
-
SHA1
69b0834d3add52f75d30c1ae0cc2fa166fb1f9c9
-
SHA256
67688cd112dad040da88c6dad7efa983f2f49f4d001a0e961c3d82d5b0025e5e
-
SHA512
78b2b75e462c59e8f47977c6a0b4be230d0ea5693dd1312242caa75d3c8fac83b97f80caab0453ec4e82808bc3cc7da298ce07ab9eebdb46f4d7d9eb6c2ca6c0
-
SSDEEP
98304:SozHqdVfB2GyuT/9vUIdD9C+z3zO917vOTh+ezsNhx5S2zh/hQqBvyAEozr1bFyF:SAQsGbT/9bvLz3S1bA329OqNXEod58h
Behavioral task
behavioral1
Sample
unlockerFPSfix.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
unlockerFPSfix.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
unlockerFPSfix.exe
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
loader-o.pyc
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
loader-o.pyc
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
loader-o.pyc
Resource
win11-20240508-en
Malware Config
Targets
-
-
Target
unlockerFPSfix.exe
-
Size
7.1MB
-
MD5
85d00e7632bdea73c43b8cada80ca0ba
-
SHA1
69b0834d3add52f75d30c1ae0cc2fa166fb1f9c9
-
SHA256
67688cd112dad040da88c6dad7efa983f2f49f4d001a0e961c3d82d5b0025e5e
-
SHA512
78b2b75e462c59e8f47977c6a0b4be230d0ea5693dd1312242caa75d3c8fac83b97f80caab0453ec4e82808bc3cc7da298ce07ab9eebdb46f4d7d9eb6c2ca6c0
-
SSDEEP
98304:SozHqdVfB2GyuT/9vUIdD9C+z3zO917vOTh+ezsNhx5S2zh/hQqBvyAEozr1bFyF:SAQsGbT/9bvLz3S1bA329OqNXEod58h
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
loader-o.pyc
-
Size
1KB
-
MD5
279790b1a309f1ae81a40e804d329265
-
SHA1
456671851352bdafe0b1beab94573dd8502ee88c
-
SHA256
45ca42da74b4bef9c5b0b48e00f1b9fda1c5a42670fbc0d1aec4b8cd14bb8ce7
-
SHA512
601a8326184be78f6bf5926a15da3783ba0de2391564774b27a75e836251098369c366d1ddf04db4a9cb0286a0a39005a05aace55dc760ff1fcd25922756d6f7
Score3/10 -