General
- Target PerthTweaks.GameMode.dll
- Size 68.8MB
- Sample260625-pc3ryabt9y
- SHA256 0b19ed5c04f2ddec5ac98ba4ca5e1656e4cdb12d5c3d31f9829e81160dd1c303
- MD5 5ed87065432dfb00b850285fee6c5b13
- SHA1 706315b34162ac3d869c9a0e089609f1b8412372
- SHA512 3ee8df55a1325ba337a70cb607724ae7da416f6acc24d9c8f2af0c161f4461619618b2154f16f66ecd51aa42c521961d8071eb58a5aba2cff474461b96074188
- SSDEEP 1572864:hnBGdkzKAybi4vNMeIrC2E21yF7bhE4AlnVPNWE/A8BuygpdDC:F8dkzKAyG8N7T2EYydChld/A8MDC
- TLSH T1DAF72356E2FD00E8D5BBC0B8C6575517EBB2345507349BEB62A48A692F33BE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PerthTweaks.GameMode.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
PerthTweaks.GameMode.exe
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target PerthTweaks.GameMode.dll
- Size 68.8MB
- SHA256 0b19ed5c04f2ddec5ac98ba4ca5e1656e4cdb12d5c3d31f9829e81160dd1c303
- MD5 5ed87065432dfb00b850285fee6c5b13
- SHA1 706315b34162ac3d869c9a0e089609f1b8412372
- SHA512 3ee8df55a1325ba337a70cb607724ae7da416f6acc24d9c8f2af0c161f4461619618b2154f16f66ecd51aa42c521961d8071eb58a5aba2cff474461b96074188
- SSDEEP 1572864:hnBGdkzKAybi4vNMeIrC2E21yF7bhE4AlnVPNWE/A8BuygpdDC:F8dkzKAyG8N7T2EYydChld/A8MDC
- TLSH T1DAF72356E2FD00E8D5BBC0B8C6575517EBB2345507349BEB62A48A692F33BE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL