General

  • Target

    фпс буст пак.zip

  • Size

    35.1MB

  • MD5

    5e0fc8a79b93c02fea6dc8b5968922e6

  • SHA1

    6748f9702fa007d0cd6d1b8904f59d77cb1f889a

  • SHA256

    cf60b9636163f0bf004bbd66048d818b6615ab5d755335e1f41bd9b5a7e7c4d4

  • SHA512

    c2c2dcede488297dd9258ec7d472392c92a04b1de342df7f9a04eec6546fa81f80272cc1f24dced871625fa21eb699bf882639caf190a126100efb9f96e29366

  • SSDEEP

    786432:v3aubvWTl8yGdP/JLQxO194Oa/3YtwnRAA38Fsy3c+:5jWh85dP/JLQ81s/3hnRiFsy3/

Score
10/10

Malware Config

Extracted

Family

xworm

C2

forms-depot.gl.at.ply.gg:27515

Attributes
  • Install_directory

    %AppData%

  • install_file

    memreduct.exe

Signatures

  • Detect Xworm Payload 4 IoCs
  • Xworm family
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • фпс буст пак.zip
    .zip
  • фпс буст пак/+fps/FPS Boost _ Input Delay/1 Cleanup/1 Delete Temporary Files.bat
    .bat .vbs
  • фпс буст пак/+fps/FPS Boost _ Input Delay/1 Cleanup/2 Disable Prefetch.bat
    .bat .vbs
  • фпс буст пак/+fps/FPS Boost _ Input Delay/1 Cleanup/3 Delete Prefetch Files.lnk
    .lnk
  • фпс буст пак/+fps/FPS Boost _ Input Delay/1 Cleanup/4 Disk Clean-Up.lnk
    .lnk
  • фпс буст пак/+fps/FPS Boost _ Input Delay/1 Cleanup/If the batch file isn_t working.txt
  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/Disable Apps From Running In The Background.reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/Disable Diagnostics _ Telemetry Services.reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/Disable Full Screen Optimizations Globally.reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/Disable Game Bar.reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/EZFPS.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/Fortnite NORMAL Priority.reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/Windows Defender (Enable-Disable)/Disable Windows Defender.reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/2 Registry Tweaks (Improve Performance _ Lower Input Latency)/Windows Defender (Enable-Disable)/Enable Windows Defender.reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/4 Intelligent Standby List Cleaner (Lower System Latency _ Improve Performance)/Disable HPET, ST _ DT.bat
  • фпс буст пак/+fps/FPS Boost _ Input Delay/4 Intelligent Standby List Cleaner (Lower System Latency _ Improve Performance)/If the batch file isn_t working.txt
  • фпс буст пак/+fps/FPS Boost _ Input Delay/4 Intelligent Standby List Cleaner (Lower System Latency _ Improve Performance)/Intelligent standby list cleaner ISLC.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • фпс буст пак/+fps/FPS Boost _ Input Delay/4 Intelligent Standby List Cleaner (Lower System Latency _ Improve Performance)/Intelligent standby list cleaner ISLC.exe.Config
    .xml
  • фпс буст пак/+fps/FPS Boost _ Input Delay/5 GPU Settings (NVIDIA-AMD-INTEL)/AMD Settings/AMD 1.jpg
    .jpg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/5 GPU Settings (NVIDIA-AMD-INTEL)/AMD Settings/AMD 2.jpg
    .jpg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/5 GPU Settings (NVIDIA-AMD-INTEL)/INTEL Settings/1 Intel HD Graphics Control Panel.jpg
    .jpg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/5 GPU Settings (NVIDIA-AMD-INTEL)/INTEL Settings/2 Intel HD Graphics Control Panel.jpg
    .jpg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/5 GPU Settings (NVIDIA-AMD-INTEL)/INTEL Settings/Intel Graphics Command Center.jpg
    .jpg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/5 GPU Settings (NVIDIA-AMD-INTEL)/NVIDIA Settings/NVIDIA.jpg
    .jpg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/5 GPU Settings (NVIDIA-AMD-INTEL)/NVIDIA Settings/Unhide SILK Smoothness (PC Only).reg
  • фпс буст пак/+fps/FPS Boost _ Input Delay/6 Delete Fortnite Config Files In Appdata.bat
  • фпс буст пак/+fps/FPS Boost _ Input Delay/READ THIS FIRST!!.txt
  • фпс буст пак/+fps/FPS Boost/3 Win32PrioritySeperation (Lower Input Latency & Smoother Gameplay)/16 Hex - Smoothest.reg
  • фпс буст пак/+fps/FPS Boost/3 Win32PrioritySeperation (Lower Input Latency & Smoother Gameplay)/25 Hex - Balance.reg
  • фпс буст пак/+fps/FPS Boost/3 Win32PrioritySeperation (Lower Input Latency & Smoother Gameplay)/28 Hex - Lowest Input Latency.reg
  • фпс буст пак/+fps/FPS Boost/3 Win32PrioritySeperation (Lower Input Latency & Smoother Gameplay)/Default - 26 Hex (Priority To Programs).reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Intelligent Standby List Cleaner v1.0.2.2/Intelligent standby list cleaner ISLC.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Intelligent Standby List Cleaner v1.0.2.2/Intelligent standby list cleaner ISLC.exe.Config
    .xml
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Intelligent Standby List Cleaner v1.0.2.2/ReadMe.txt
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Ultra Low Latency Plans/Power Plan Instructions.txt
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Ultra Low Latency Plans/ultralowlatency.pow
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/0inputlag.bat
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/Advanced Latency Optimizations/Interrupt Affinity Policy Tool.exe
    .exe windows:6 windows x64 arch:x64

    a711e9452df690c5bbffb36c0badc62b


    Code Sign

    Headers

    Imports

    Sections

  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/Advanced Latency Optimizations/MSI util v2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/BCDEdit Optimization.cmd
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/Disable Unnecessary Services.cmd
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/Remove Temp and Prefetch Files.cmd
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/SvcHost Split Threshold.cmd
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Latency Optimizations/rocketboost.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Advanced Registry Optimizations/Advanced DWM Optimizations.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Advanced Registry Optimizations/Advanced GameDVR Optimizations (Don_t disable if you use GameDVR.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Advanced Registry Optimizations/IRQ Priority Registry Optimization.txt
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Advanced Registry Optimizations/ThreadPriority Optimization.txt
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Disable Ease Of Access.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Disable Power Throttling.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Disable Windows Telemetry.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Memory Management Optimizations.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Mouse Optimizations.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Revert Changes/Revert.reg
  • фпс буст пак/-latency/FULL Windows 10 Latency Reduction Pack/Windows 10 Registry Optimizations/Windows Priority Optimizations.reg
  • фпс буст пак/BoosterX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • фпс буст пак/LOW PING.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • фпс буст пак/Optimization/Registry/DataQueueSize/How To Find The Best Value.txt
  • фпс буст пак/Optimization/Registry/DataQueueSize/KeyboardDataQueueSize.reg
  • фпс буст пак/Optimization/Registry/DataQueueSize/MouseDataQueueSize.reg
  • фпс буст пак/Optimization/Registry/Disable FSO.reg
  • фпс буст пак/Optimization/Registry/Disable Mitigations.reg
  • фпс буст пак/Optimization/Registry/File System.reg
  • фпс буст пак/Optimization/Registry/LargeSystemCache.reg
  • фпс буст пак/Optimization/Registry/PowerThrottling.reg
  • фпс буст пак/Optimization/Registry/Win32PrioritySeperation/How To Find A Good Value.txt
  • фпс буст пак/Optimization/Registry/Win32PrioritySeperation/Win32PrioritySeparation.reg
  • фпс буст пак/Optimization/Registry/Windows Photo Viewer.reg
  • фпс буст пак/Optimization/Scripts/DPC+Interrupt Test/DPC+Interrupt Test.txt
  • фпс буст пак/Optimization/Scripts/DPC+Interrupt Test/How To Test DPC+Interrupt.txt
  • фпс буст пак/Optimization/Scripts/Debloat Script.cmd
  • фпс буст пак/Optimization/Scripts/Disable Process Mitigations/Disable Process Mitigations.txt
  • фпс буст пак/Optimization/Scripts/Disable Process Mitigations/How To Check Process Mitigations.txt
  • фпс буст пак/Optimization/Scripts/Disable Services Script.cmd
  • фпс буст пак/Optimization/Scripts/Kill DWM/How To Do It Properly.txt
  • фпс буст пак/Optimization/Scripts/Kill DWM/Required/KILLdwm.cmd
  • фпс буст пак/Optimization/Scripts/Kill DWM/Required/pssuspend.exe
    .exe windows:5 windows x64 arch:x64

    a6a32311420ceb9ef8a92cb8745dab9a


    Code Sign

    Headers

    Imports

    Sections

  • фпс буст пак/Optimization/Scripts/lowlatencymode.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • фпс буст пак/Optimization/Windows ADK Installer/dxwebsetup.exe
    .exe windows:5 windows x86 arch:x86

    1494de9b53e05fc1f40cb92afbdd6ce4


    Code Sign

    Headers

    Imports

    Sections

  • фпс буст пак/POW FILES/Amit_v1.pow
  • фпс буст пак/POW FILES/Amit_v1_lowlatency.pow
  • фпс буст пак/POW FILES/Amit_v2.pow
  • фпс буст пак/POW FILES/Amit_v2_extreme performance.pow
  • фпс буст пак/POW FILES/Amit_v3.pow
  • фпс буст пак/POW FILES/Amit_v3_low latency.pow
  • фпс буст пак/POW FILES/Atlas Power Plan.pow
  • фпс буст пак/POW FILES/Bitsum Highest Performance.pow
  • фпс буст пак/POW FILES/Calypto.pow
  • фпс буст пак/POW FILES/GGOSv0_8_5.pow
  • фпс буст пак/POW FILES/GGOSv0_8_5_Idle_Enabled.pow
  • фпс буст пак/POW FILES/Muren.pow
  • фпс буст пак/POW FILES/Muren_Idle_Enabled.pow
  • фпс буст пак/POW FILES/RekOS_Power_Plan.pow
  • фпс буст пак/POW FILES/Unixcorn.pow
  • фпс буст пак/POW FILES/Unixcorn_Idle_Enabled.pow
  • фпс буст пак/POW FILES/Zoyata.pow
  • фпс буст пак/POW FILES/Zoyata_Low Latency.pow
  • фпс буст пак/POW FILES/Прочитай.txt
  • фпс буст пак/SHUTUP10/OOSU10.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • фпс буст пак/SHUTUP10/ooshutup10.cfg
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/ReadMe.txt
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Debloater/Advanced Debloating/ReadMe.txt
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Debloater/Advanced Debloating/Windows 10 Debloater (Advanced).cmd
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Debloater/Advanced Debloating/and will allow you to choose apps you want to remove
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Debloater/Advanced Debloating/install_wim_tweak.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Debloater/Default Files/Default Apps.txt
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Debloater/Default Files/Windows PowerShell.lnk
    .lnk
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Debloater/Windows 10 Debloater.cmd
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Driver Disabler (Advanced)/Default Files/Default Drivers.txt
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Driver Disabler (Advanced)/ReadMe.txt
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Driver Disabler (Advanced)/Windows 10 Driver Disabler.cmd
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Service Disabler/Default Services/Default Services.txt
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Command Prompt Changes/Windows 10 Service Disabler/Windows 10 Service Disabler.cmd
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Others/DLL Backup Folder/mcupdate_AuthenticAMD.dll
    .sys windows:10 windows x64 arch:x64

    47f7628e6b082adac923be521f62fa1f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Others/Disable Memory Compression/Disable Memory Compression.txt
  • фпс буст пак/good pack/EverythingTech_s Recommended Optimizations/Others/HDD or SDD Behavior Changes/HDD or SSD Behavior Changes.txt
  • фпс буст пак/ОБЯЗАТЕЛЬНО ОТКРОЙ!!!!!.txt