Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 18:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FPSBOOSTV9.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
FPSBOOSTV9.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target FPSBOOSTV9.exe
- Size 3.3MB
- Sample260709-xdt57af13p
- SHA256 52c0e412f9f37e5753e239ebaa625a48372525a36c201604e6f5e7474ef47ea0
- MD5 ce97c7b087c95112d0e0efe2d8bcd4a5
- SHA1 8c28b2c77ab5fd050d6337ddd78f225d3461263c
- SHA512 343b69f5f164fad80503baa109057299f802f2d72548c02a9091cace366bc329a731618c92d34e5253515b5eecbef2985571564898eaa3533bdcbec389d5fda9
- SSDEEP 49152:pRR8qxI0dPJLLyas2Mrf5l2Pe4WjiCJv3oxz:pRB3dSrBlvrWCxo9
- TLSH T137F58B03BC9109FAC09AA37289B362963B71BC092F3267D72E54B7782E727D05D36754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 5352 FPSBOOSTV9.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 5352 FPSBOOSTV9.exe 5352 FPSBOOSTV9.exe 5352 FPSBOOSTV9.exe 5352 FPSBOOSTV9.exe 5352 FPSBOOSTV9.exe 5352 FPSBOOSTV9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\FPSBOOSTV9.exe"C:\Users\Admin\AppData\Local\Temp\FPSBOOSTV9.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:5352
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5652