General
- Target gameutil-rs.exe
- Size 563KB
- Sample260806-qn57wasbpf
- SHA256 127d85e304d30a2426e9637fd86c3daee194d59ec76270b88c0c654ff2c4557a
- MD5 2f301fde47097a3765d072ee83e467e3
- SHA1 d61368769af28a00175726ea542f813ba9f7a081
- SHA512 8e2700ecdf83cdcdc3beb3c29ca19490ccfac7b71269d3a8bbc014e136329622ee9f51e5cabc85cba63e996c604b7218dbe056b434f5d80db51bff46208f8eaa
- SSDEEP 12288:oL3SGeipkkaxDRWDguPiojeZ3BenBAn8EIa:U3SGBguPioyZ3aBAn8EI
- TLSH T18DC45A17F65624BDC06AC17483179A72BA32BC860B357EFF16D0A5313EA5AE02B3D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gameutil-rs.exe
Resource
win10ltsc2021-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target gameutil-rs.exe
- Size 563KB
- SHA256 127d85e304d30a2426e9637fd86c3daee194d59ec76270b88c0c654ff2c4557a
- MD5 2f301fde47097a3765d072ee83e467e3
- SHA1 d61368769af28a00175726ea542f813ba9f7a081
- SHA512 8e2700ecdf83cdcdc3beb3c29ca19490ccfac7b71269d3a8bbc014e136329622ee9f51e5cabc85cba63e996c604b7218dbe056b434f5d80db51bff46208f8eaa
- SSDEEP 12288:oL3SGeipkkaxDRWDguPiojeZ3BenBAn8EIa:U3SGBguPioyZ3aBAn8EI
- TLSH T18DC45A17F65624BDC06AC17483179A72BA32BC860B357EFF16D0A5313EA5AE02B3D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.