General
-
Target
FPSUnlocker_x64.exe
-
Size
57.1MB
-
Sample
240823-jtl8mavfkn
-
MD5
042a9c355c8cb771eb7be07ded4c0f30
-
SHA1
0c89668954744ae7deb917312bdbea9da4cc5ec7
-
SHA256
9ea9cfb9c5da423b4c2f6ab49277765df102a456888faa52a6f95bfeb46b4a57
-
SHA512
6f16a33eeb69fc2b6fe8e2b7856470a6fa202b8a95aef840b8583cd5cdab871cfeae9a5c9512a9667236bd9ee3c0defe1e1f09153079b11b8aa5fe3c15e8c9ac
-
SSDEEP
786432:kg10nRYHJvP/39aB7vvPToG6LGJd1HjIUS0yTdH7KFcWZk6Qgoqs1jRyBMLYXTF8:kQ0upvdaN3PT9uGZ3NUbYzIPLMP0
Static task
static1
Behavioral task
behavioral1
Sample
FPSUnlocker_x64.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
FPSUnlocker_x64.exe
-
Size
57.1MB
-
MD5
042a9c355c8cb771eb7be07ded4c0f30
-
SHA1
0c89668954744ae7deb917312bdbea9da4cc5ec7
-
SHA256
9ea9cfb9c5da423b4c2f6ab49277765df102a456888faa52a6f95bfeb46b4a57
-
SHA512
6f16a33eeb69fc2b6fe8e2b7856470a6fa202b8a95aef840b8583cd5cdab871cfeae9a5c9512a9667236bd9ee3c0defe1e1f09153079b11b8aa5fe3c15e8c9ac
-
SSDEEP
786432:kg10nRYHJvP/39aB7vvPToG6LGJd1HjIUS0yTdH7KFcWZk6Qgoqs1jRyBMLYXTF8:kQ0upvdaN3PT9uGZ3NUbYzIPLMP0
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Execution
Command and Scripting Interpreter
2PowerShell
2Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1