Overview

overview

5

Static

static

3

crack/version.dll

windows7-x64

5

crack/version.dll

windows10-2004-x64

5

driver_boo...up.exe

windows7-x64

4

driver_boo...up.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IObitDriverBoosterPro11.6.0.128-HaxPC.net.rar

  • Size

    33.7MB

  • Sample

    240820-n68dvazhlc

  • MD5

    4a18b21b27049522261f2055d60986f0

  • SHA1

    707e5583d9749c15e1c136aabf3696847fc9c2ee

  • SHA256

    ef43c47a4e1fb383232f5d73177497833d149628a5b32641d28026dfd84c8d01

  • SHA512

    f0ddac9f2bded5ab56380a57692341f583b401c0fc151d7edde0ef6ec3ce4e4e47b1e02eb8a1009cc596ba5439544f344179c6e2ac656f90cfdbfd26090482ce

  • SSDEEP

    786432:iUBlCR2Ji9NT6fGyBjXfVHe2M5CJxPxIT40oHt6ZJdBjls6cj7RxYAP/i+P:iUBlCgc/uGyy2Xx5zVHu3s6cjcu//P

Score
5/10
discovery

Malware Config

Targets

    • Target

      crack/version.dll

    • Size

      5.3MB

    • MD5

      cc165af6a6e4978c66a86b25cf58b92b

    • SHA1

      3767e079d784c5a2b5088de7c172da1c1bf63daf

    • SHA256

      4e12ff9a72b7c2357f46ef645400cb6311330ced73ee787244c85ba7c57e8c8e

    • SHA512

      29ed9563b901b818e69b17861ed55c8e0866f535ead9e1e67926ccaf587bbf00270b088111627a56795f1aff2ba9fab6c01407fa436cea81163e2db958304623

    • SSDEEP

      98304:pCS1O1pjm2VjLI8YKriL2KOwQ6XF5kgNEbiB/n+SWvVO6aNKJkaSjc7:8gO1kmjZY0aQoaY+iIM2kK7

    Score
    5/10
    discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

    • Target

      driver_booster_setup.exe

    • Size

      28.4MB

    • MD5

      2c99c30d6e3805acda4235e789b7d089

    • SHA1

      0a1e695ad2db32c91773599c1a8d637c8a975c57

    • SHA256

      743881f014d40332960f205a12a438e90f45b0f01516d2948b3e3ea1b460e109

    • SHA512

      4ddb9e8d090593d380df94c59ff4604a0e6ee40417e5ecfe451baa8b05a5df48b42d26fbdda742f4ec0335222193e7a641d1b9377259d9376a534c7d6a89e69e

    • SSDEEP

      786432:09NT6fGyBjXfVHe2M5CJxPxIT40oHt6ZJdBjls6cj7RxYAP/i+:0/uGyy2Xx5zVHu3s6cjcu//

    Score
    5/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks