Overview

overview

7

Static

static

5

DLSS5-Swap...le.exe

windows10-2004-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DLSS 5 Swapper.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows10-2004-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/app.js

windows10-2004-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/...on.exe

windows10-2004-x64

1

resources/...er.ps1

windows10-2004-x64

3

resources/...64.exe

windows10-2004-x64

1

resources/...ed.dll

windows10-2004-x64

3

resources/...ed.dll

windows10-2004-x64

1

resources/...s5.dll

windows10-2004-x64

1

resources/...32.dll

windows10-2004-x64

3

resources/...64.dll

windows10-2004-x64

1

resources/...ss.dll

windows10-2004-x64

1

resources/...sg.dll

windows10-2004-x64

1

resources/...nr.dll

windows10-2004-x64

1

resources/...on.dll

windows10-2004-x64

1

resources/...ss.dll

windows10-2004-x64

1

resources/..._g.dll

windows10-2004-x64

1

resources/...nr.dll

windows10-2004-x64

1

resources/...er.dll

windows10-2004-x64

1

resources/...is.dll

windows10-2004-x64

1

resources/...cl.dll

windows10-2004-x64

1

resources/...ex.dll

windows10-2004-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

$PLUGINSDI...7z.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    DLSS5-Swapper-2.2.0-portable.exe
  • Size 230.4MB
  • Sample260910-ebwbcswfjh
  • SHA256 673f2aba9db63564476ea1582d322150da65a7b33d48720dd9a6e35dc1edff82
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Targets

    • Target
      DLSS5-Swapper-2.2.0-portable.exe
    • Size 230.4MB
    • SHA256 673f2aba9db63564476ea1582d322150da65a7b33d48720dd9a6e35dc1edff82
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1
    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3
    • Target
      DLSS 5 Swapper.exe
    • Size 180.1MB
    • SHA256 9e5fd2106c75118c50222f37cde56da0b7bafa6760e5b29283961f1b0bbd3969
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral4
    • Target
      LICENSES.chromium.html
    • Size 8.7MB
    • SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5
    • Target
      d3dcompiler_47.dll
    • Size 4.7MB
    • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral6
    • Target
      ffmpeg.dll
    • Size 2.8MB
    • SHA256 4fcdedbc68eae4b4cfe0eed275316fdf66c9d4a57a98d29a77d0e8f4149cfcbc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7
    • Target
      libEGL.dll
    • Size 481KB
    • SHA256 d9d2f5b5fae60a63523f92c07539dd93893ff7d9ffa41f0bb57caca4be9f2220
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8
    • Target
      libGLESv2.dll
    • Size 8.0MB
    • SHA256 4b4dcbc7bb19449ec89d2bf06e7b05af9352a4e6f97f4444183dc3080e6c0f1d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral9
    • Target
      resources/app.asar
    • Size 2.1MB
    • SHA256 34cf407685bf01b2f98c7b6ae7ff4eb667b599f498f070851b825bf95aa3e3d0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10
    • Target
      resources/elevate.exe
    • Size 105KB
    • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11
    • Target
      resources/payload/ReShade_Setup_6.8.0_Addon.exe
    • Size 4.1MB
    • SHA256 afe4c8f13048306307983b8b3d41d5bf00a86820440b0e57dea10950e1176445
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral12
    • Target
      resources/payload/feeder/Verify-DLSS5Feeder.ps1
    • Size 57KB
    • SHA256 6c8769b1f848705fb83943ea6109e9df92f9e63254bf64eb56cd59bbe34e5212
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13
    • Target
      resources/payload/feeder/dlss5-feed-host64.exe
    • Size 104KB
    • SHA256 397dbf49c3a2b5f3bc13cfa0e0b3df4316edae9c45be7379bcacad066ebb07f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral14
    • Target
      resources/payload/feeder/dlss5-feed.addon32
    • Size 138KB
    • SHA256 d2df9fbf9b5e0cc24291b9240e4f8dd2aae063592571bbed37302878b6dac74c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15
    • Target
      resources/payload/feeder/dlss5-feed.addon64
    • Size 219KB
    • SHA256 066eec8c797df2d656f2ab2324278921b1dd6e9116c9945294f4a00f7fec608a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral16
    • Target
      resources/payload/renodx-dlss5.addon64
    • Size 1.6MB
    • SHA256 245c06137ad13b1ca03afaad5100c1e8f0dce8c11fe50a9272ea562f33cea601
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17
    • Target
      resources/payload/reshade-vulkan/ReShade32.dll
    • Size 4.2MB
    • SHA256 da430e0a9c6eecefa0d1b27d05e16c426fb5d04e808b194d914eaac4b31bc0f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral18
    • Target
      resources/payload/reshade-vulkan/ReShade64.dll
    • Size 5.3MB
    • SHA256 0cee63f9c9f13f3ac909c5b4903f4dbb4b719a7ab3b4f13b0deaf83c814b94f7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19
    • Target
      resources/payload/streamline/nvngx_dlss.dll
    • Size 56.2MB
    • SHA256 c85f971ce023c9f3492fc7455f0b01a24ba18ea39636407a846902c4360b0b7e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral20
    • Target
      resources/payload/streamline/nvngx_dlssg.dll
    • Size 7.1MB
    • SHA256 5d5cbf14d2727d47f93fd10bf77bd91708ae122482a6f86fd564971641ebd47b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral21
    • Target
      resources/payload/streamline/nvngx_dlssnr.dll
    • Size 158.2MB
    • SHA256 8270b350cd82de5ce89806872cdd6b6a9249b80836b91bbeb3573470744cc206
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral22
    • Target
      resources/payload/streamline/sl.common.dll
    • Size 811KB
    • SHA256 a4b2b5acbe49fbc6d44dd432cac19cd53218f698b2539dc7ed0fb268c72cfc8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral23
    • Target
      resources/payload/streamline/sl.dlss.dll
    • Size 411KB
    • SHA256 1eb5fb3d6f01d340fe086d981cc2de4f18aa6d05ee276e5cf28ecd54818dcc8b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral24
    • Target
      resources/payload/streamline/sl.dlss_g.dll
    • Size 611KB
    • SHA256 b8b5effd7debdb750abd216de43385fb653261712bc315d85eba68811fb3ee02
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral25
    • Target
      resources/payload/streamline/sl.dlss_nr.dll
    • Size 391KB
    • SHA256 9f6672e5e0170dc118a3188d21bda187e1fc1aa3502895b21ab846d23165c11d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral26
    • Target
      resources/payload/streamline/sl.interposer.dll
    • Size 636KB
    • SHA256 27b2190057994c0b287c2c5716953bf1586f6499ac12fbbb2092b9aaf8396570
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral27
    • Target
      resources/payload/streamline/sl.nis.dll
    • Size 1.1MB
    • SHA256 6039e38a1af56c8e86f3e936596e2db910bf3d76bbf4268562a3b13763049dfa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral28
    • Target
      resources/payload/streamline/sl.pcl.dll
    • Size 351KB
    • SHA256 12aa4e76c28a27c735e4ecb3072f44d09428acb107b70ac38e4bd48ddb05f88d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral29
    • Target
      resources/payload/streamline/sl.reflex.dll
    • Size 373KB
    • SHA256 ecf12973cdcec2ffced2ea77b1c7e45f4d387e7c864ddb5531b66a6f947effb3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral30
    • Target
      vk_swiftshader.dll
    • Size 5.3MB
    • SHA256 409a0fa76f055a87ae70434414586d144502beb25fa3004866ee70abd9a8547e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral31
    • Target
      $PLUGINSDIR/nsis7z.dll
    • Size 424KB
    • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

Score
7/10

behavioral5

discovery
Score
3/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

execution
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

Score
1/10

behavioral13

execution
Score
3/10

behavioral14

Score
1/10

behavioral15

discovery
Score
3/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

discovery
Score
3/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

discovery
Score
3/10