Overview
overview
8Static
static
3Benchium-F....0.exe
windows11-21h2-x64
8$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3Benchium F...er.exe
windows11-21h2-x64
8LICENSES.c...m.html
windows11-21h2-x64
4d3dcompiler_47.dll
windows11-21h2-x64
1ffmpeg.dll
windows11-21h2-x64
1libEGL.dll
windows11-21h2-x64
1libGLESv2.dll
windows11-21h2-x64
1resources/...dio.js
windows11-21h2-x64
3resources/...ery.js
windows11-21h2-x64
3resources/...oth.js
windows11-21h2-x64
3resources/...ors.js
windows11-21h2-x64
3resources/...cli.js
windows11-21h2-x64
3resources/...cpu.js
windows11-21h2-x64
3resources/...ker.js
windows11-21h2-x64
3resources/...ket.js
windows11-21h2-x64
3resources/...tem.js
windows11-21h2-x64
3resources/...ics.js
windows11-21h2-x64
3resources/...dex.js
windows11-21h2-x64
3resources/...net.js
windows11-21h2-x64
3resources/...ory.js
windows11-21h2-x64
3resources/...ork.js
windows11-21h2-x64
3resources/...nfo.js
windows11-21h2-x64
3resources/...ter.js
windows11-21h2-x64
3resources/...ses.js
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...er.exe
windows11-21h2-x64
7General
- Target Benchium-FPS-Booster-Setup-2.1.0.exe
- Size 84.9MB
- Sample260627-3far8ad16y
- SHA256 87ff905c7e0cdb999e5ff075c42f52e1b236b098c3995721d55cf5e3224c1fa9
- MD5 0f2b0284849bdba8702620d67c776c5b
- SHA1 9b0919b24d860ed73eec7ee49b791c1c78aeaca9
- SHA512 6b3be8869aa5b8b7bc590d46912cca32c9f2415d444941cf3e1c04013ac2115c7153aafe7fae7373dfbd04379e91113b959bdc2037931bc0fa22e2fe928a92a0
- SSDEEP 1572864:Xfu/U1RESsuvlV3b1+ga+24UOIOxXZNJV4ACC/ZgXAUM9mKJg3CXigCsKV:XfqkP3kgRMANJV4sZgAIgJige
- TLSH T1631833FB1BAA5066F41700BAAA2D3C2C9B799F836D9BC5525B3D6056B3F065C37010E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Benchium-FPS-Booster-Setup-2.1.0.exe
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
Benchium FPS Booster.exe
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
LICENSES.chromium.html
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
d3dcompiler_47.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
ffmpeg.dll
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
libEGL.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
libGLESv2.dll
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/audio.js
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/battery.js
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/bluetooth.js
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/bluetoothVendors.js
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/cli.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/cpu.js
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/docker.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/dockerSocket.js
Resource
win11-20260513-en
Behavioral task
behavioral20
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/filesystem.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/graphics.js
Resource
win11-20260513-en
Behavioral task
behavioral22
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/index.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/internet.js
Resource
win11-20260513-en
Behavioral task
behavioral24
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/memory.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/network.js
Resource
win11-20260513-en
Behavioral task
behavioral26
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/osinfo.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/printer.js
Resource
win11-20260513-en
Behavioral task
behavioral28
Sample
resources/app.asar.unpacked/node_modules/systeminformation/lib/processes.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260513-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260513-en
Behavioral task
behavioral32
Sample
$R0/Uninstall Benchium FPS Booster.exe
Resource
win11-20260513-en
Malware Config
Targets
-
- Target Benchium-FPS-Booster-Setup-2.1.0.exe
- Size 84.9MB
- SHA256 87ff905c7e0cdb999e5ff075c42f52e1b236b098c3995721d55cf5e3224c1fa9
- MD5 0f2b0284849bdba8702620d67c776c5b
- SHA1 9b0919b24d860ed73eec7ee49b791c1c78aeaca9
- SHA512 6b3be8869aa5b8b7bc590d46912cca32c9f2415d444941cf3e1c04013ac2115c7153aafe7fae7373dfbd04379e91113b959bdc2037931bc0fa22e2fe928a92a0
- SSDEEP 1572864:Xfu/U1RESsuvlV3b1+ga+24UOIOxXZNJV4ACC/ZgXAUM9mKJg3CXigCsKV:XfqkP3kgRMANJV4sZgAIgJige
- TLSH T1631833FB1BAA5066F41700BAAA2D3C2C9B799F836D9BC5525B3D6056B3F065C37010E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Benchium FPS Booster.exe
- Size 172.8MB
- SHA256 2d3c53f37c42ff3be27377321a9e22a63372f98daaea4cc584bd7de52da82212
- MD5 9d0416b9f6d2fb6553f808bd0dd6ba24
- SHA1 4b7d578d844f7f3bc9d8ce57c7caae6b59c404a0
- SHA512 f202759436954ce7819d3d5694930508c21cf14f422d2ace254ca561eb1fc757450978c63b1839fec6306272d41de4775c593b430fa863e5b7a842c25921998c
- SSDEEP 1572864:C7NR7Rm1DKEM9Lx4vpOzDE0Yyb5IcIZBVAM9gjMdCjWqgXVbRgTsndR0aL/9eO:7VxsOcY7TR79T
- TLSH T141888B03E39A40D9E00DD1B58B9B9633EE71B8494B29B6DF275407522F77EE42B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Executes dropped EXE
-
- Target LICENSES.chromium.html
- Size 9.0MB
- SHA256 dc2878d9bf6ef5fca45737536272a7a1877e0c6f89cb9578cb0f956781102986
- MD5 11ee9d008e924e19b33e0b45fdf145df
- SHA1 140773241b15513e9d7a7aff4d1c1d8f7e0b7e41
- SHA512 4acd065ffee81972fb1cfbe11507aab75c883aa94e359f3c455f87813925bb2d3416ce440561b430d6dedcc2f566d5cb74de139e181da68507ad36e69a672662
- SSDEEP 24576:h+QQf6Ox6x5n1nZwReXe1Gmf36k6T6W6r656+eGj/dBIp+:oABeGLp
- TLSH T15796A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ffmpeg.dll
- Size 2.6MB
- SHA256 113ccc8e701157d0d59283baa5dc1fd3b0eae2571fd825084d7a4d58697a5ec2
- MD5 64f3f2ae25b14f5d2d168ba6aae49ab6
- SHA1 f43554aeb7a1b20b6e9dcbe5408cc004eb7db27a
- SHA512 3ffb531da6ef1955f7b71c5f6e9e3322dafce78735aaf9b245c46bd5ccfa8a6a4b282b31b3aacb4e3b423412b9ab89f792ce37f3a9e6eb83983adfe7df38bfcf
- SSDEEP 49152:R1nRu1gjn93AXtsX7I8g4AScbz6Ox+pen6yfmb+ST1PqRrYF:RJsf83Sn6Ox+tP5F
- TLSH T1F6C5AE12F6D640DDD02DC074879F9623F63038468B24AAEF16909A243F6BFD42E7E765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target libEGL.dll
- Size 470KB
- SHA256 01b8a8c2875ecb9979de339500ce0e0b7ecc3c5387053ce27bea51e6a09e2d72
- MD5 b12e3c1e72935273492da1daee50eef1
- SHA1 3f93237b71ee1328cf25f8223e685de97d01d773
- SHA512 12346000331cde78ea08e9c0fef4635c77f6e85fb0e46706bbec1f23b0d7a7ef99e3930475324306ab4a46587d382ee3beb18d703e2765a8c1b7ece144c57983
- SSDEEP 6144:Omi12qlTgeUDsnkcM2nDl83BgENhYCqNSfY24M:Omk2qxgeUDsNnDcgENhYRNSfU
- TLSH T1F4A48E1577E444A9E02BD134CA574642EA76B4820F65FBDF02A493392F7BBF85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target libGLESv2.dll
- Size 7.7MB
- SHA256 fb6ea924fbb9417e4695ce414cdcbc299f13451dbedd2d9adb55479bf1cbf57f
- MD5 5082e41d7a57506fe6b4bd58f87276b4
- SHA1 2842372c18f49c0e1fd8123891be8587cbf13146
- SHA512 9e10d0d3269939f9a497f0b0937f0aeb9ec44627d5349cee589b676aaf95dde11c996e2eda158cf8e79778cfd948b10cb61538c9cc056f7b899a057e7e959f76
- SSDEEP 98304:DPqhbsPD8TDyGDsTnI5mvmKGtS17QXC3O:DP4m8TDyluKGugmO
- TLSH T1E5868B03F69680D9C04DD2B5975B9227FA35B8840B34B6CF265423253F77BE0AB7AB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/audio.js
- Size 8KB
- SHA256 8701cb7a6f1f79efd1ff47bb99ada995e0ec440f57defb1584433ce3aea04ec9
- MD5 9933dca9970c9bfebcf2aa1f04197068
- SHA1 a75172b4397abe585fa6e912e912efface0e25d8
- SHA512 07066dab7e0cf6243f77b633b22efe25899836696d1c0048de49b18b76d24d99570a3a1d5e2cb53a709c7fa44a6f76070802a1d8ba8c741956f59a78c4fe5182
- SSDEEP 192:nAqPHReNh3hthrhJaKeMeB0puKMTY8wP2uSQfBN1AfpXpCkp6KCiQ46ium1oNoMi:nD83Sw1lK6yBea8GBq8R
- TLSH T1490221946CBA74110363F0BB3A4F4207E316BA03212ECC56F64C92549FC2762F2EDEA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/battery.js
- Size 15KB
- SHA256 63d09c8ea093adf09447d631aab640a90dfc66dd4e63c8f8d7d651fe58f5f50e
- MD5 e52e76ff32570a61bf3084d43e36f232
- SHA1 83c53658bf6207795ebc1f17f0e3b8d58c6b3c44
- SHA512 c7836f66bac6f0e2567e53786da3383c5e6027100a96b945ce21156c7b0653ed0af0d92b05a959e564bd6ac427cd49d3aed1cc21c4e671e1c8def1dabd2123bc
- SSDEEP 192:3AEGQpyNv3MwsG6rRahq2xaH6R6n17VQtQL1g7axigY5ZwE6QEZ6CnIDaXYzdj/U:3uJq2xGn1pgE1iVZwCI1OolFBB1FBX
- TLSH T11162EDA49DA220559703D4EE6F4F4217DA28EA83591F85C1B84C9214AF82711F2FDFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/bluetooth.js
- Size 11KB
- SHA256 b1f6625a95d4568f074b0786c3ea86afdc7d63c52f0c37afb5703aa42ff4aae7
- MD5 6277cd915fdb5136864b1cfa7f0b288d
- SHA1 cd6407ab80c5374871cb1249a43acbfa14b7f776
- SHA512 ee55989573e96ac6e6e6b8e3fb9a16597a0f2afb014e2a58f0682ec28ebce5387e7bedd4ae13ad077fb83c33ad8a09cefbb480c058b7fa2bd43ed758f3d9d352
- SSDEEP 192:nABvOza3XeTyWypeQh7aB0/D5D7+GrnsdZc7c5cCcJcRc/K026Qmy8pG6Jx2vFYQ:nFV026jM6Jx2vFmNF3SziED5qcGLVhe
- TLSH T18432EF05DCBAA02142E3F1ED1F8F4085F116F443216ADC9AB65C6640FFD1B60A5EEB9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/bluetoothVendors.js
- Size 35KB
- SHA256 44fb1a561c38cff8e96b8f97cce54b3e17d01b09e139c16cf1ea9a4698220075
- MD5 3ef098fdadec00586b333a7be40cf338
- SHA1 8b08f49827a95b3ad25c365cbc658add7088ae2b
- SHA512 e1319abe83cf886e45e06cca5ae362c29b2ed6b2ab2411d2b79fa63ea8c06af6266d10b5a6c74ce0802663b4ff0db22990724a66cb7acce460b099b94133110a
- SSDEEP 384:ITt6+kuAlj2+dYFOODqSrVJTucSSIzqTy4IwyBg49MZbAiA:sexjLST2qTyVbJEm
- TLSH T1C3F21FF6271E36A6510E2104A94E684E20B531D402F8322AF8DDE15DB5FCF39D2F9A7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/cli.js
- Size 4KB
- SHA256 ef3e4ce0c16c7396aec9eeaaf07f21c90355c6c68924eb01f5dd181ee4470d54
- MD5 5eafc062ab9d805614f64f39249538e8
- SHA1 fdffd8eded7542455662aef8d7d35d04f4e4358a
- SHA512 4daf16f5a53f0b1f8ce9d907f040e7f3f2beab0ffafa30888c97ba9b89da71c3d4f557babd6b1be1bf050c0bb78cf6518f810e54952503ee981d2ec5a3d0c397
- SSDEEP 24:ygXPn5OrXA1F3NbE0pMlP672A4t8XRvVIO8pgOdIrSMUKCwX0IOdQgQ9ywMQbR5d:fXPeAz35pilS72Ht8hdI9TKzaxWsonZz
- TLSH T1219145392FE74414306BE82EBE476006EA1DB9167074E951F5CD33914FCDB5482AE1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/cpu.js
- Size 69KB
- SHA256 54384cc0b9077b68d0be70103752c9e7ee503662328b97d8fdbd44c985392e37
- MD5 f9811ae24599e38cf032274dc28ad9e4
- SHA1 56a0d2f9d6511d5e7210b28e713f360b9c6d6c7e
- SHA512 8f6769130c07667ac11aeb1520ed9ba2623dce4036651616a2917da724dee4ee5e6e10709b71bd22643b518b8366c2a9b24c40d6a87dcc87f84082d7ff8e1af6
- SSDEEP 768:vVitWle0IyZDiqlvYiaDIaIBxmWEeRYKS5MOJw1lkTJHyq6QYUtEOHPGoCmDpf9g:titWLIyZGqpYnDIBx6b9Guf9hpw
- TLSH T1266342F45DA32940D62AA06C5F4F102AE7296303F59CED75BD9E82104F8D710B2FDAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/docker.js
- Size 26KB
- SHA256 f814f6f2f2dfd207e275d82117d8b587c7cd8b9988d52298ee1ef4c9e190cb1c
- MD5 6965f3e7c4636ede235943ebbbce7c05
- SHA1 e927fee75d60b9e9bdf83040a153274b2215529a
- SHA512 dda25ec1ce56a8e7becaf6eedebf99310f606f6401e5a517093c67193b09ee33edc4c5221375eabb3fee883022f2181066a723659a124d6d85c0e210cf0cda29
- SSDEEP 384:ZPAZjm5SD27txzL3H2A7t+6eXn+XBPzDJTsmqsRFl7S5x/gdLb4VXlJeZ9wcoAxo:Z4MZHxen+5DJTWlJeMcK
- TLSH T1F8C20D4C6EB62035A973F8AD6B4F0216EA95E003950DCD50BA5CC250DF87B3872FDB96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/dockerSocket.js
- Size 7KB
- SHA256 394a5b0c58333a2121d8a08c6191d98b688eda87e92c044f763529b4f2ec00e5
- MD5 65246a43f4f3645ce4bfdcf0f631f006
- SHA1 714acfb1e5a8a484e983d0cfb1d64a94823a323f
- SHA512 4582679607da31d6d3e6c68075a100aa06cd3ad13ba4a6dd67d83a76df94720137b9da33147acb8a2e4df4a956d500355eec81ea35a116a25dee98181c7186dc
- SSDEEP 192:/A1lL39TVpN39TVp5VndbVZVQB39TVpb8ndbVZVQX0TndbVZVQxbXndbVZVQE39l:/i9Tzp9Tz7dbTCl9TzKdbTC6dbTCd3df
- TLSH T12EF1F959FCB312186873F31B0B5B8654F213A1874749CE8B7B9C4750AF82318AAAD7D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/filesystem.js
- Size 63KB
- SHA256 3c7c262a84ece5175b55bd9418397596c93e5ee828fd5943a19e144f05154d23
- MD5 dba1cff46e363dfaa84d04bba61a6a58
- SHA1 f78cb040264efe7aabe06119d6df8bb85bc89b92
- SHA512 d46a39ffb751412ae5262530a1be1190711fce2c7b3f5524069d2b6883737a7b6943203fb8df55cbea71030d2b963f4bd10f5e1ec566b1f6333be1ff2acf9d6d
- SSDEEP 768:eqkPCNs5QHt3IbuR2S9RwlH1yOCjWgAJMGW+1/KfuRn5VY5GULnwoIVDvB:/Ko0Dp
- TLSH T1DF531D586DB734540B63F06D1F4F512AE226D2036808DE84FD9C5300AF8AA69A7FDFE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/graphics.js
- Size 48KB
- SHA256 19f219ca4bde8f82cab55c565c10c805631dc30b6f7580ee5338c1f5127a3312
- MD5 6edf1f8dba711e30478709053de828d5
- SHA1 38860afbe64d8ae701d302008e95300382f70db3
- SHA512 34445d72f6c16b2ec501065756fa895002e8613c21d0cd74f39a61884fc359eac79027d4243e01c9ec3d612563ce2c8bc137bc7de6f1508c4d09fa68f1596484
- SSDEEP 384:AvmC77TtPuTnqsQslPDdy6vQkUxI4kU5MPR8wG3rxfxBBkK/c5ocYil3HzVK8JUQ:AlFqPDdK3rpxBBR6K8hOD3b0lXl
- TLSH T1642354445CB22A304743F06D2F4F922EE232D1537548DE097D5C56016F9AAA893FFBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/index.js
- Size 15KB
- SHA256 4111a288b865e8b736ea56b1462029b206d47084d01f70f119d62116c7addc44
- MD5 5a8ec638d08954176425f4a9ba1c45aa
- SHA1 d51baa8f04316dea6c60597118df1823644b4eac
- SHA512 a0b6d5b68f0cf10137f8cedfbac5a344b40e4b8aaa02b17b02c23ab9a050c3d74e61af97aa9262a15d9daabb43124373b7783d118431c206a85c86617ba6c0c5
- SSDEEP 384:8qU+QFjVHcazV7uy6UweOeuBS1LA2yTqK/xBdrt9+nQpph01H:8Z9b76UweOeuIOru1H
- TLSH T19D6225096EB3615512A7F0EDEB4B900AE715D1033546CDE93D9C53409FC6A38A3ECFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/internet.js
- Size 7KB
- SHA256 2c2f5b888a271d7d8c39c8850ab2d65e1daa3c0c14d5c0d3cc52aa33c3ffe24b
- MD5 02d8fdc7293cb146f1a1d69809c7f7b8
- SHA1 659895992ed701e4aaa62ce0c1cdad7f97e3b9e5
- SHA512 c530f9ca652c01fe813cfd588dc8fb0f0725ca1ff8f13a62cb5820637308b14aa824ffa2869c1176223e8c2a33486fe1e7019b543e0bebcf70e6dc3639faffc7
- SSDEEP 192:UAL8KYrIJ0YyaLaIqIsg7+YzITwrzC+JTYya2wrdzUgbCqXgeW6EsCqXge6JxqST:UaJJCz9RRTEJrivK6EmOjPB5
- TLSH T1B2F1AB480CBBB5629673F1AE4B9F560AE365D127660CCD58BE9C43004F82B74E3EDB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/memory.js
- Size 25KB
- SHA256 233a619e09385c3b6bfdcf9ab736ec39730d6831f6973e53a3dd11751bd7b15a
- MD5 9503e43958988132f04d0e03e284cd4c
- SHA1 2067f89130119df0571c38a04e1345b458826a62
- SHA512 75c6b56b11b7018158e78080b7b334feab07ad47f19c53f70d04d85ba461c2519976ea11f448d9b1d1c6193ec5391f2e3304e2e9f1be723fe13c1ecdd942aee3
- SSDEEP 768:eE43SkMLhGFQhE/YwOPR3ua5goWusc2iZa6:5IFQhar2MuZpY6
- TLSH T13EC22EA55D7270916F1BF0BD1E0F020ED31AA603D80D8C92BC5C86245F85A5AA3EDFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/network.js
- Size 70KB
- SHA256 8f9ac39d06d5207ca63cb71eb019f349315ea642ab7eb133276367a8cd21a047
- MD5 5088580db0a9331d3d4f2b21ae647bfd
- SHA1 41bec09776df0339a850b822937678185b9e944f
- SHA512 fce28d1e9e6f54424cfb32ad5b6e9767cb5614f6da6aea14c087f6ba028a47ab514af3fd1ccb1fdc7ec7a848583d3ce6ff65e79936c4e5962e10f0c7f40a787f
- SSDEEP 768:bE7emMmKivFBRLyjjCk2Yw/pueL/hHReuPO+xHI5nn8MEelTPGtSymjA5TKYYCuy:d+vNwjCknM/7O/8MnMEji6W1fGZgS6f
- TLSH T15E633E586DB374190713B07E4F4FA519F225A0232608DD98BEDC82119FC1A3AA7FDBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/osinfo.js
- Size 47KB
- SHA256 f00965a0fdd20c5907db1e07967737430880446e2d0d53617729d440740ed6a6
- MD5 48afbdc94ce4bf7eff62e84f22d8fd34
- SHA1 bbbc9c957f6f78b562d523263fd3683a306fc281
- SHA512 182cdfd4de416a4b676f030b944ee444e0887d30aec6e293342817a75d65b69554506657d822b6bc19572c8b7d4b1af1ea6c9b9c633d3e9dfdc47cadae7c0a4f
- SSDEEP 768:rGDdgKkJ3mZiKtB/RtbBM/3lVZmpqUNPNgmzNmZupFUmus9ixYpCR81Aciqy1hxo:cKAB5BAsh
- TLSH T167231F482DB27A260B63B0AD5F5F900AF7265213215ECD65BDCD63009FC223466FEBD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/printer.js
- Size 7KB
- SHA256 d7ae131f71228f7e574ae8d3ccb673e92365bb73d67bd78906839910b95f41b6
- MD5 662336813288f79520c7b04873b74502
- SHA1 68439b8c03ccad44528ca4087a07450b0189a899
- SHA512 0b9a9a8f5d48796e7e5a86cfc1f96dbfc33f9cf4516c82945b755fa6ea6aa8006d8eb373d0255dff95c38f3f66b0cab1b58fc6c575dc3c480ffc60cf1df17c05
- SSDEEP 192:oAclOQ8WnQ7q+WQ2dqFQzQnCF+GNMCqz4fQQtQL4IDLjI6NqXgeCvACqXgejV:oFOnSmqrZdqFyGYK7gt6kGvaF
- TLSH T1C8E1DE941CBB7C040762F0996E4B9516D52B6A03717DD802FE5C62004FC277AF2EDFA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/systeminformation/lib/processes.js
- Size 50KB
- SHA256 a0afb9813e95e88016778f2f715434d80e07b422c34f112ffa4d3bca456d59ea
- MD5 34068ad6ab274a87ba0cbdde922921ec
- SHA1 cdc85698b90f473385a98588621cf07e5836674f
- SHA512 cba97c39ae5b2649be58f4d0ebe257b5a1da25183280f66ebce457a70c4658475981a8619e02fd9aa604bc6c25026dbb5d8fdb6e608323c7e419d99abe0951bd
- SSDEEP 768:o2Z7+Wey1mPzD72Oge4BuZ5nsqBs0kAOqzOJGb6mV0IU3B5:F7Xo7rRSqBs0RGGdGhz
- TLSH T13C3362856CF730110AA3F56E6F4F0216E36992031618DD65BD5DD2006F82A28B2FEFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $R0/Uninstall Benchium FPS Booster.exe
- Size 516KB
- SHA256 c6e88bf583af125e2ec908705deec43d900da6ac68f33be7165534db9ea685ab
- MD5 6c87ae97a791340da98fe124eb997468
- SHA1 d27297e69d7639f1f6d58aa53c990a7d568be639
- SHA512 7e6d5260a68adc9e1f062d4804343cb2c34db2306aa3f0cd749acc680d07f71772f32b243023479e6504305f69229eab81c20349509fa4fde2e99052bc72e9a1
- SSDEEP 3072:Cn77v00hEoDEtau9rXU3WHE5vLAfa2MNUa8b32tvhOEA1RJCir86SrSrv6Ia3v:C740IN7U3WHE5TY2Ua8T2t0EyL+yaf
- TLSH T1CDB4E2F35F884526F49301BA2A2D3D2D8B789F832E9786025B7C2252B7E170C77595E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1PowerShell
2Scheduled Task/Job
1Scheduled Task
1