General
- Target FPS BOOST V5.zip
- Size 1.5MB
- Sample260625-p73qesct3m
- SHA256 745fced7269879ac1bcd13206b211b6d8b7da778bfc618e1bccc3d44b2741452
- MD5 1c668f5d7a6c506e7f4d730e98b17fb6
- SHA1 b4cea4eb599c6ba7333b254e5f4638d9112ddb0c
- SHA512 3591893a3b83491881de0a8b683e1ce782e2f037528089d439e248fb3774b647b2d4e4cadcc23919fcfb612240567d0131942b22bcc76cf8500cfb2e29c5c860
- SSDEEP 24576:mJR4QE9WbAYRbx5nQdTrI8gx+8/CsrYfD7gFvua+OS1T2dwtoxVCj90TIWqDg4s:mJeRIzuTrI8gx+8e7euHOS1T2dBkjyT1
- TLSH T1FA65338FF7E8DA16965A13349A64FB3D1A01E40650BE20301F5E9DEB04C2255FA7FCE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FPS BOOST V5.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target FPS BOOST V5.exe
- Size 2.9MB
- SHA256 3bd98bf5f0211c2ae2c621d95d01d31d7fb25d270e6c3d5e75b56822d7f4d3f8
- MD5 1e69a6287a964279a3a30dceee5d7a8c
- SHA1 142c89a1f558823402d6af9a7b4ed9ae1b5a513f
- SHA512 9d20dd481f02206dd7ce7d6076088a02c2ad581d4d2185d5707cbe966c2e3b466dbca157dbcc00cd2cdc6d124d74d51a8cc7ef359d5fb9b0b5ffce57014165df
- SSDEEP 49152:/8aFLgmztXud4XBUb7sFxeoDY5O43uoqnf4Wr/:/8SSA6bYFEYY5OUbifbT
- TLSH T1BED58D077DE189E5C8AA637289B65693BB34BC044B3673D32E80B6382F327D19D75784
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger