664bc1fa462525b6be35c78ff6807f07334a4bfad532e6132fc2e8168a5be8bf | Triage™

Login
Reports

Overview

overview

7

Static

static

7

FurMark/FreeImage.dll

windows10-2004-x64

5

FurMark/FreeImage.dll

windows11-ltsc_2024-x64

5

FurMark/FurMark.exe

windows10-2004-x64

5

FurMark/FurMark.exe

windows11-ltsc_2024-x64

5

FurMark/am...86.dll

windows10-2004-x64

3

FurMark/am...86.dll

windows11-ltsc_2024-x64

3

FurMark/core3d.dll

windows10-2004-x64

5

FurMark/core3d.dll

windows11-ltsc_2024-x64

5

FurMark/cpuburner.exe

windows10-2004-x64

3

FurMark/cpuburner.exe

windows11-ltsc_2024-x64

3

FurMark/gpushark.bat

windows10-2004-x64

3

FurMark/gpushark.bat

windows11-ltsc_2024-x64

3

FurMark/gpushark.exe

windows10-2004-x64

3

FurMark/gpushark.exe

windows11-ltsc_2024-x64

3

FurMark/gpuz.exe

windows10-2004-x64

7

FurMark/gpuz.exe

windows11-ltsc_2024-x64

7

FurMark/start.bat

windows10-2004-x64

5

FurMark/start.bat

windows11-ltsc_2024-x64

5

FurMark/unins000.exe

windows10-2004-x64

7

FurMark/unins000.exe

windows11-ltsc_2024-x64

7

FurMark/zlib1.dll

windows10-2004-x64

3

FurMark/zlib1.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
FurMark.zip
Size 9.1MB
Sample260810-afwepsxgnb
SHA256 664bc1fa462525b6be35c78ff6807f07334a4bfad532e6132fc2e8168a5be8bf
MD5 08fe0990517f42881089ef06e86dcd12
SHA1 ff8359c2ec3303563bd38fd6cc57500e6c65f323
SHA512 0560d484d952385ca6f058ab7271a4e7eb4c42589130104c941c13410670eb1c73d7acabd6516921a1cf2bd05c86c75d5b7138fd9f50a4cdf8ff3fb7395fe946
SSDEEP 196608:B6Jia0TzQATy4kaa4+d4eZGNfjvmXyd0hpaWllalEGk86OZN:da0nsAa4c4eQdOyd0hX2lEG3TD
TLSH
T1ECA63373BD0D6247C9E70B97306F3E563E45DDA59CC34F8EAE31C18980D0ACA3969906
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution installer upx

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

FurMark/FreeImage.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

FurMark/FreeImage.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

FurMark/FurMark.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

FurMark/FurMark.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

FurMark/amd_ags_x86.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

FurMark/amd_ags_x86.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

FurMark/core3d.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

FurMark/core3d.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

FurMark/cpuburner.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

FurMark/cpuburner.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

FurMark/gpushark.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral12

Sample

FurMark/gpushark.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral13

Sample

FurMark/gpushark.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

FurMark/gpushark.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

FurMark/gpuz.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery installer upx

Behavioral task

behavioral16

Sample

FurMark/gpuz.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

discovery installer upx

Behavioral task

behavioral17

Sample

FurMark/start.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

discovery execution upx

Behavioral task

behavioral18

Sample

FurMark/start.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

discovery execution upx

Behavioral task

behavioral19

Sample

FurMark/unins000.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

FurMark/unins000.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

FurMark/zlib1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

FurMark/zlib1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  FurMark/FreeImage.dll
- Size 889KB
- SHA256 a2ed0dd0a52847645a05a2c61f64284cb5cbefa9cd8e168af5e8c6138ef7fe4b
- MD5 cb1c50b16863e835371a2a8fcea3a653
- SHA1 9b98f2aefe5a2d7f7b27d0cf3422746a54635cec
- SHA512 df619f4f85cd9bd464e9216f7b6a9414898cf7f5e293a741f033b5a7259da94e0b65860b8b3ca244afdb8eee93a9cfbe56af88d742760aa00353332897fe06de
- SSDEEP 24576:/q/5M50p6/xcgIfX2MINEa+owfsHZMWSKCLJ8Gut:My0pvv2L14CSKCLJ
- TLSH
  T1331512D4ABB8D863E335843C3C949AFACDA178710BD1076C633DF9686272791184A36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  FurMark/FurMark.exe
- Size 2.6MB
- SHA256 c0e2db947ad0cc2c8eb1ecbbc8ddc2e4e98336c36c20c236673388e79842c49a
- MD5 e67533f7265affea390051f5278f8f7f
- SHA1 cec2776eb125c5a13c0c2b19ae2fdca63b9e1bf2
- SHA512 4799765f1e48d54cefb357eb6688c4d25626421dcec4e79db78e11c7f6042475f9f3d36f3f53618611f961c3eeb7b87499e2806360afe2a1aba3d14e6ea23d28
- SSDEEP 24576:DZQagi6S5qGJqlMmAZriFJzTSu7GqQiReTuFw5Y6KMP5l2RU732E75ZE8KRyyYKK:VSGrdQmbBiUKC7mU56D419Ey30XU
- TLSH
  T149C5BE6EF005B038D8354F72CDB0DA5C802A7E502B2596CF7E4D765A97B83D21E2EE25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  FurMark/amd_ags_x86.dll
- Size 90KB
- SHA256 b28f75b7a0161841a8ec8401376a7089d1f4e6675f7f8709cf6f9128f85c6d13
- MD5 39b101f2ccc7dc51de8727725df7de05
- SHA1 d2cdd3acece2af4566e883cf06013a3d7c0fd58f
- SHA512 25150d95f58d997221af175b310d66de7dac4d6ee5e3b863eafede9838d972545a025459771812bf84b29e4e1a95bb5c16ef4bad1e7f69c694ff7994c33463fc
- SSDEEP 1536:O4LowihVWGgm3Y69nWCZguLd0Dg4bywJc6vn8yqw1hsWjcdTmVGGo+q:OOoJTpN3hWCbp4b//nHV1OUod
- TLSH
  T192936B01B6D09070E4BF023A45BADA51473E7E21DBB59DDB7B94224E6A741C0AF36B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  FurMark/core3d.dll
- Size 1.8MB
- SHA256 fef4faafedde845637c6624390c6f45f262c4a1e76ec8ab176f870f662fd762e
- MD5 4fad32f8b5156cfc03af566600484b17
- SHA1 8080c78fba8cfdcb42694d044f28869418115f79
- SHA512 63b036ea46087435be768af51ddcc7546e76be3214e62676f84057d9a6fbe2b720cca20d06bec92c9bf64b59ab784718ae71d7f83bdf8b59c1ba333290f869e1
- SSDEEP 24576:OnPusl7HEIVZ7NgQFc46fOkWCNjc7n8eFwWbtQ6RAA9kjccwxym+9XaglJ:CF7NgRhfO9OWlRb+w4ZllJ
- TLSH
  T1C7858D10E5AB88B5D55A7D383868BB6FB83CFA01171A12C7A3E4E459C4F47D01B7F24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  FurMark/cpuburner.exe
- Size 88KB
- SHA256 589c0dc8076ae39e3c40fa091c8b91f748e34f7099c94ba5ebb4e0eeefeb9019
- MD5 8a2a6b3aaaa5b6162c6085edac54d5f2
- SHA1 334e96fb5568eb004b6054a6d35989d86c6465f7
- SHA512 0895da06637ce045399515dd85347f3a205fce6105d8bed52b038d27d2ab9bac82bbcde5df995cfd54cd85ad70aa6c71eee7b6abfa509000d8358cddee3d5171
- SSDEEP 1536:qC/uy9/ra8NNqQbYOQ2RSL08njwq2aPln8f:LJ9/rRNgOQ2EArZaPlnc
- TLSH
  T150934C17B2B8D070D07213F44C65DEA9697E78122E604ACB27EC17BA1E703D06A7979F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  FurMark/gpushark.bat
- Size 56B
- SHA256 4baeda8dace2dd9430b40433fceaab36bd00ed067a5d1e0d9c9071a1f366219c
- MD5 c18248628c327c1322c45e11aa78020b
- SHA1 25bd34ce120ba60493aec262844f6161d5a964c2
- SHA512 b0e3ddd331292b3b54a4cbd42d7353b9d2a33e2eafa1c180d40332264a85533ac11000893941a4c93484d46b71cbc6f9ebc5778a1d354efb2a38770be83834d8
- TLSH
  T14C900457C54F51D5D51013043C0FF5104D4130401F04473457CCCD17405C534747735C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral11 behavioral12
- Target
  FurMark/gpushark.exe
- Size 2.6MB
- SHA256 4274d53d635673b923c7f6ed5c7eee8a43b9d98df5ba4fd6fc04ac8d7cab9bf1
- MD5 af841d6fb2561b91db3ce6ce6dd0bf12
- SHA1 8e092c00cbb4d9326b24bf7fe322b79fdaaa7ed2
- SHA512 e7a002d5a9a258b6ae9a5dad7a44708cf5acfae0c8c822912a8aebc07b8690f9d2253e4e2d83e4b52c3aec391fe5280cc7c517f561315ef0877c1f6242f0dd70
- SSDEEP 49152:iaDgjvxMR4oxM6kdNJ2O6ni9vgKKE4Qn0Y9efX+mKDz:iNDboxu
- TLSH
  T1E2C5B4032367B25ED664503002E894EC1CDD6B6D8FF74FAA251CAD6CC4E89E316AD76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  FurMark/gpuz.exe
- Size 5.0MB
- SHA256 5d4a26d850fac53190b9d2cb967cbe524ace0ff61d271a5b617d55e8f9060f00
- MD5 439f0af4e517714c98cf7133c968915f
- SHA1 2f8304e7ffc6f9dfcf6130c3a202a6b28f6576d1
- SHA512 70d4d52490aec1cf45c9040dbc39388a8a9841305ed97c23434c1c850da36620e1f28861034a925d9cd443b56d99c6e89475f1d63ad4868b0fc489135555196b
- SSDEEP 98304:DdH7Kk9NTPY+oPNJZVI6AZDsIm9mD1kzbxQTX+73MZXtLliaxRAcH9P0hdaj3y9j:hYPNZI6ARIm1C7cZ9Lnxxchdg3yfln
- TLSH
  T1103633BF447BE622E046C536950B53F17169E0D041F1D8D67B9BE2DBA03B72123E6B28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer upx
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral15 behavioral16
- Target
  FurMark/start.bat
- Size 659B
- SHA256 bb35b33e4a5ebeaa3b189a7b7af07a5320ec5dbf93efffd1639f9aafc241ef2f
- MD5 ccf372b436b54302796f63f78423f993
- SHA1 e0b6d2466d89b07ec2ac5614be9356e998b48b5b
- SHA512 e6904b1da4b0ac50f052129ba08a11e51fa9cb631d7777a4606fa28211cf658ffe91d0ac87b5c1f80bdce5cf8111d9845cbb478099df47bfcdfdc9a4b1a3f25a
- TLSH
  T157014431075E920BCD5C74A1D0A87977FB53DA58425E11770AD71BF7853D3266D1740C
- MD5 SHA1 SHA512 TLSH
Score

5^/10

discovery execution upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral17 behavioral18
- Target
  FurMark/unins000.exe
- Size 708KB
- SHA256 f20095fb067fd3ec0503fa69974ec894405fa10dbf49b02d60274e8508ecaa57
- MD5 ba24cc0e0ead01169b92b978647c5049
- SHA1 7a0ed056ae52943d73a5446ff1c469e7afc35099
- SHA512 9d8f54459fe03906cc9622268dbbed0b5c4f22e0bdf0eaea643fc0f5a9b33ab3f44f3eabee05e58b608d4e176e2e74d3d5b2f247666b6dd5a7d235b9a66a1116
- SSDEEP 12288:2sMLIMoi3rPR37dzHRA6nX0D9OKWbO7SERb5rNUK1bce0syxyR0:xMcMoi3rPR37dzHRA6G7WbuSEmK50syZ
- TLSH
  T128F47C32F2A08837C1B32E789D1B82955936FD103E39B59736E91F0C4F796817A272D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
behavioral19 behavioral20
- Target
  FurMark/zlib1.dll
- Size 72KB
- SHA256 bb00cb404ba455cb4f97ecd9a660fdc9b7e2b6552b92627a86124760a87d649b
- MD5 5006eaab6f921a1c44aab7c93ad0bd95
- SHA1 304802e1f9fdad20d14289966b679416204ac48b
- SHA512 9d27f0ccdf36950e266b85be4793ae8f2823302430bfdd5935068474d49bc7041d06c22d0dd477c9d727bfcde665b69adc9e3aac7355886035b0fed625ed1d7f
- SSDEEP 1536:vkCgJgBbAcqmHzDgd2+nToIfZIOjIOGix:v0gaNmHzDgdXTBfzFGix
- TLSH
  T17C736C0297D157E2E8B8267950DB972DDB32B20947AEC6D3688C3F9558123E5E7302CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

discoveryexecution

behavioral12

discoveryexecution

behavioral13

behavioral14

behavioral15

discoveryinstallerupx

behavioral16

discoveryinstallerupx

behavioral17

discoveryexecutionupx

behavioral18

discoveryexecutionupx

behavioral19

behavioral20

behavioral21

behavioral22

© 2018-2026

Terms | Privacy