Extracted

• • Target
    FPS-Booster/FPS-Boost.bat
  • Size 269B
  • SHA256 e10d2f79deb1090c000d217afaf29c720838bec835764033f81d61bbbc3d2680
  • MD5 c19d9fdb67fc5018e228f8ec8aa07baf
  • SHA1 2d86554bcdda8c0df866963e04b21083ea76ce6f
  • SHA512 1fbfa636cea95d9afafd5411c471cd1177a7872de126713324de66730da92e35725b2ee0d983923f1f568cc08637c396f085515d0e61c764d50bffea76e3ef0f
  • MD5 SHA1 SHA512

  Score

  10^/10

  pyinstallerspywarestealerupx

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  behavioral1behavioral2