General
- Target driver_booster_setup.exe
- Size 31.8MB
- Sample260717-phv92sev5s
- SHA256 00c53f38da49ad9d56f7c11c7d395684794748d6133b1f3793689291dedd07e8
- MD5 cb6805c0c2a5d5de828920a86295b0f5
- SHA1 c1f634c1994eb6530d5087a5da7d7cb795dcfa6d
- SHA512 270ad4073c4adac9dbcc2ad1e87d952e13e98abaea670373aabb750079025c0e5936fe1d461e099fa71916d786342079b980e03fc642fa1e9097ab992ea98ac0
- SSDEEP 786432:RRfW9ODK1tQjQrZqNcqxGmJ8wsIUzbB3Z0yott7JSz7:+DOQrZqPxK7PbB3Z0Vt7c7
- TLSH T1C0773365A7CC0D70F422DD35A9A308635C72B63E76E5A5502F70E68CCA3E6879837F48
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
driver_booster_setup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target driver_booster_setup.exe
- Size 31.8MB
- SHA256 00c53f38da49ad9d56f7c11c7d395684794748d6133b1f3793689291dedd07e8
- MD5 cb6805c0c2a5d5de828920a86295b0f5
- SHA1 c1f634c1994eb6530d5087a5da7d7cb795dcfa6d
- SHA512 270ad4073c4adac9dbcc2ad1e87d952e13e98abaea670373aabb750079025c0e5936fe1d461e099fa71916d786342079b980e03fc642fa1e9097ab992ea98ac0
- SSDEEP 786432:RRfW9ODK1tQjQrZqNcqxGmJ8wsIUzbB3Z0yott7JSz7:+DOQrZqPxK7PbB3Z0Vt7c7
- TLSH T1C0773365A7CC0D70F422DD35A9A308635C72B63E76E5A5502F70E68CCA3E6879837F48
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.