General
- Target FurMark_2.10.2_win64.zip
- Size 33.6MB
- Sample260716-gpcghsd19p
- SHA256 27ab2e723e2e65df720bcafea681d2104744eda4a1e0a0374d7e61eaa820e63b
Malware Config
Targets
-
- Target FurMark_2.10.2_win64.zip
- Size 33.6MB
- SHA256 27ab2e723e2e65df720bcafea681d2104744eda4a1e0a0374d7e61eaa820e63b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/EULA.txt
- Size 2KB
- SHA256 9c57adf59afb757bef0634eb7ebcbda1b67ac44fb6310c6741bed82411fcacb5
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/FurMark_GUI.exe
- Size 611KB
- SHA256 c145a3da7feb4fa1458efd52c541948ae63117d609030ea361b24b1a5499cae5
Score1/10 -
- Target FurMark_win64/README.txt
- Size 2KB
- SHA256 65e5a4fabf083b9f5967296003c00635e36bb96665e438dcd6d541adafd1dcba
Score1/10 -
- Target FurMark_win64/_fm2-gui.exe
- Size 251KB
- SHA256 41aa66c7c2860798bcf6133880a7ef5f4dec07831b4cf15efa0cbec41082983a
Score1/10 -
- Target FurMark_win64/_scores.csv
- Size 481B
- SHA256 729aec929f80ceaffc38fabf7c46ccaad7ba6bc53f7dadee5ecc3b8854964df3
Score1/10 -
- Target FurMark_win64/conf.xml
- Size 137B
- SHA256 4550b8e57b96a31e7751426917234ecb8ae3a083c7f55455c665d071da84c31d
Score1/10 -
- Target FurMark_win64/cpuburner/cpuburner.exe
- Size 113KB
- SHA256 89440540448ab232d21cadd1d8ef9551b8beb46c45af3ed41b3c3d9d02f0f07d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/credits.txt
- Size 1KB
- SHA256 3ef9e7b8b3db01f2b6e47f2433004cfa11238378cdfe6dac9829de0adb46541e
Score1/10 -
- Target FurMark_win64/exports/_readme.txt
- Size 25B
- SHA256 a1e6fe840373167ea8a6583d4faa5574dfd1f307b4b5b3205afc4b19a6c80087
Score1/10 -
- Target FurMark_win64/furmark.exe
- Size 248KB
- SHA256 d587e006089b5c7b44c3e3894bff116cfc186eaeed110dbed4cbfb8a359aeb62
Score1/10 -
- Target FurMark_win64/g.dz
- Size 7.6MB
- SHA256 89ea3c1a632f2a6ff69d7ef2d283d6c4cc2de0abcb59a63c6dc8e8f225453004
Score3/10 -
- Target FurMark_win64/gpumagick_sdk_x64.dll
- Size 848KB
- SHA256 78e0619189964ad63f4df7e1ab1933a173bc05f743e1f056c7e43e362d475384
Score1/10 -
- Target FurMark_win64/gpushark/EULA_FM2.txt
- Size 1KB
- SHA256 feee0b2eb991e499459c11a80140f66e4d8794ea36e5e6d241af79dbdee7364a
Score1/10 -
- Target FurMark_win64/gpushark/gpushark_x64.exe
- Size 1.2MB
- SHA256 7adffe88312ab47c5d716889aa4e16f6bb3f9cd6265f2fd3c612656daeae5b86
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/gpushark/gxc_x64.dll
- Size 5.6MB
- SHA256 a70e6a5da3471123a9b984732919b36d10f5b7031bc4cf91966b5a3bbb2fdfea
Score1/10 -
- Target FurMark_win64/gpushark/gxl_x64.dll
- Size 4.2MB
- SHA256 7fe88319f5f45bfe9e10a39e3261c7e8cd4e06bbf30556721359bdd42aaaff9a
Score1/10 -
- Target FurMark_win64/gpushark/plugins/plugin_gxc_cuda_x64.dll
- Size 139KB
- SHA256 d004b6a11e4f965c03a06c592fa2393e81c6f56ca81ce92177f4e80ee7208942
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/gpushark/plugins/plugin_gxc_gpumon_x64.dll
- Size 571KB
- SHA256 68c6960b84d342c76762e808f6fff2fc7ee261096b215a704332ae5ae3868e73
Score1/10 -
- Target FurMark_win64/gpushark/plugins/plugin_gxc_opencl_x64.dll
- Size 159KB
- SHA256 437527f745f18cf755968fedea7a0db120373813be9173b1bc1641b852163161
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/gpushark/plugins/plugin_gxc_vulkan2_x64.dll
- Size 417KB
- SHA256 36cef52cfd8d275e42c7f2671ae8d7032e213d880d1082ff6526c946ade74eb6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/gpuz/gpuz.exe
- Size 10.9MB
- SHA256 147d70853cc2f4bcd6092270a339eebe7e59b92c929a386408c1a203738907e8
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target FurMark_win64/gxc_x64.dll
- Size 5.6MB
- SHA256 06bbd20e10e4bb843475c417201e24d64f9acf6a0fda001a76c818b89e2089d4
Score1/10 -
- Target FurMark_win64/gxl_x64.dll
- Size 4.2MB
- SHA256 b2332580a9d850e823a7ef2ef6ddfe094cd4ed94b9540a26e6e17adca6413cd8
Score1/10 -
- Target FurMark_win64/plugins/plugin_gxc_as_x64.dll
- Size 139KB
- SHA256 13e595db2a8358506ee172313379ab57fbcf97cc551c698d8f9519d82ec6b2a5
Score1/10 -
- Target FurMark_win64/plugins/plugin_gxc_gpumon_x64.dll
- Size 572KB
- SHA256 5211eb112bed1912729bc71c863e3d08a8aac34df3806b515829d7c0e663a7ad
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/plugins/plugin_gxc_vulkan2_x64.dll
- Size 418KB
- SHA256 21aa36986a8d17ac6b0ee2ec05ec8104f454e150ea22ee0bfd8c48994ef0794a
Score1/10 -
- Target FurMark_win64/start_benchmark.bat
- Size 772B
- SHA256 89bad99773f5be6ee976cdad74fb67c8a0d66afcd641968fd4a5632a0bda2e7e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/start_examples.bat
- Size 2KB
- SHA256 d81681cfeaf3d61196db232dc74b29d4fc22eee9fdc88b9fcec9ecf05fc4350f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/start_fullscreen.bat
- Size 154B
- SHA256 9383a04116b58ba4d07bc2c098523de85d09944848c8574e963e8f9cbab6215c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target FurMark_win64/start_vram_test.bat
- Size 1KB
- SHA256 df09a8e6aa504ff1600e89c112597e7044d9beb430ee83f619b0ba2261eef80c
Score1/10 -
- Target FurMark_win64/vram_test.bat
- Size 1KB
- SHA256 aee21d3e02c3d091241c4e4a0a193e477e82081411d2b02136250fab5935c750
Score1/10