General

  • Target
    Benchium-FPS-Booster-Setup-2.1.0.exe
  • Size 84.9MB
  • Sample260627-3far8ad16y
  • SHA256 87ff905c7e0cdb999e5ff075c42f52e1b236b098c3995721d55cf5e3224c1fa9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Benchium-FPS-Booster-Setup-2.1.0.exe
    • Size 84.9MB
    • SHA256 87ff905c7e0cdb999e5ff075c42f52e1b236b098c3995721d55cf5e3224c1fa9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/UAC.dll
    • Size 14KB
    • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/WinShell.dll
    • Size 3KB
    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Benchium FPS Booster.exe
    • Size 172.8MB
    • SHA256 2d3c53f37c42ff3be27377321a9e22a63372f98daaea4cc584bd7de52da82212
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to get system information as a root user.

    • Executes dropped EXE

    • Target
      LICENSES.chromium.html
    • Size 9.0MB
    • SHA256 dc2878d9bf6ef5fca45737536272a7a1877e0c6f89cb9578cb0f956781102986
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    • Target
      d3dcompiler_47.dll
    • Size 4.7MB
    • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      ffmpeg.dll
    • Size 2.6MB
    • SHA256 113ccc8e701157d0d59283baa5dc1fd3b0eae2571fd825084d7a4d58697a5ec2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      libEGL.dll
    • Size 470KB
    • SHA256 01b8a8c2875ecb9979de339500ce0e0b7ecc3c5387053ce27bea51e6a09e2d72
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      libGLESv2.dll
    • Size 7.7MB
    • SHA256 fb6ea924fbb9417e4695ce414cdcbc299f13451dbedd2d9adb55479bf1cbf57f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/audio.js
    • Size 8KB
    • SHA256 8701cb7a6f1f79efd1ff47bb99ada995e0ec440f57defb1584433ce3aea04ec9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/battery.js
    • Size 15KB
    • SHA256 63d09c8ea093adf09447d631aab640a90dfc66dd4e63c8f8d7d651fe58f5f50e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/bluetooth.js
    • Size 11KB
    • SHA256 b1f6625a95d4568f074b0786c3ea86afdc7d63c52f0c37afb5703aa42ff4aae7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/bluetoothVendors.js
    • Size 35KB
    • SHA256 44fb1a561c38cff8e96b8f97cce54b3e17d01b09e139c16cf1ea9a4698220075
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/cli.js
    • Size 4KB
    • SHA256 ef3e4ce0c16c7396aec9eeaaf07f21c90355c6c68924eb01f5dd181ee4470d54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/cpu.js
    • Size 69KB
    • SHA256 54384cc0b9077b68d0be70103752c9e7ee503662328b97d8fdbd44c985392e37
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/docker.js
    • Size 26KB
    • SHA256 f814f6f2f2dfd207e275d82117d8b587c7cd8b9988d52298ee1ef4c9e190cb1c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/dockerSocket.js
    • Size 7KB
    • SHA256 394a5b0c58333a2121d8a08c6191d98b688eda87e92c044f763529b4f2ec00e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/filesystem.js
    • Size 63KB
    • SHA256 3c7c262a84ece5175b55bd9418397596c93e5ee828fd5943a19e144f05154d23
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/graphics.js
    • Size 48KB
    • SHA256 19f219ca4bde8f82cab55c565c10c805631dc30b6f7580ee5338c1f5127a3312
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/index.js
    • Size 15KB
    • SHA256 4111a288b865e8b736ea56b1462029b206d47084d01f70f119d62116c7addc44
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/internet.js
    • Size 7KB
    • SHA256 2c2f5b888a271d7d8c39c8850ab2d65e1daa3c0c14d5c0d3cc52aa33c3ffe24b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/memory.js
    • Size 25KB
    • SHA256 233a619e09385c3b6bfdcf9ab736ec39730d6831f6973e53a3dd11751bd7b15a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/network.js
    • Size 70KB
    • SHA256 8f9ac39d06d5207ca63cb71eb019f349315ea642ab7eb133276367a8cd21a047
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/osinfo.js
    • Size 47KB
    • SHA256 f00965a0fdd20c5907db1e07967737430880446e2d0d53617729d440740ed6a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/printer.js
    • Size 7KB
    • SHA256 d7ae131f71228f7e574ae8d3ccb673e92365bb73d67bd78906839910b95f41b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/app.asar.unpacked/node_modules/systeminformation/lib/processes.js
    • Size 50KB
    • SHA256 a0afb9813e95e88016778f2f715434d80e07b422c34f112ffa4d3bca456d59ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 6KB
    • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsis7z.dll
    • Size 424KB
    • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $R0/Uninstall Benchium FPS Booster.exe
    • Size 516KB
    • SHA256 c6e88bf583af125e2ec908705deec43d900da6ac68f33be7165534db9ea685ab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

defense_evasiondiscoveryexecutionpersistence
Score
8/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

defense_evasionexecutionpersistence
Score
8/10

behavioral7

discovery
Score
4/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
7/10