Analysis
- max time kernel
149s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/05/2026, 06:02
Static task
static1
Behavioral task
behavioral1
Sample
GamingRepairTool.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target GamingRepairTool.exe
- Size 734KB
- Sample260516-grt5caet5k
- SHA256 1ea33e868bdb2c7d1606fd2098c2bd04495dfaebebd6e794b32fe72f198598db
- MD5 564cbbe290ecef057be1452c78d432c2
- SHA1 2c9dca57673012b0f6cde764d4dcd80b9b4a1322
- SHA512 499132d247f5b20a909b113e90183134563fc79a30efef85e9415b970fc979e5edf6492b8ac1c0cedcc2817c1b64459ac86fe0a31ba03ffbb0051764efc316a6
- SSDEEP 12288:DGEi6aexKa7oU2emrA7JoX1m0v9RCe/Jya6TIW:DGEba2KaodAGXzia6TIW
- TLSH T1E3F4F716ABFD42A4F0F7E73489B68156EA367C536A31C64F0281415E0F33AA19E79733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Modifies security service 2 TTPs 1 IoCs
description ioc Process Set value (int) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\wuauserv\Start = "3" GamingRepairTool.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 GamingRepairTool.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz GamingRepairTool.exe