ce5e132e03b7510ba2816900ac75fddf3df4b6fda4fef12e680ed5a9c437a52b

Sharing

Copy URL Twitter E-mail

General

Target
OptiScaler_v10.0.0-pre1_20260912_Modded.7z
Size 54.3MB
Sample260916-2nhmcsfb96
SHA256 ce5e132e03b7510ba2816900ac75fddf3df4b6fda4fef12e680ed5a9c437a52b
MD5 144e2cabdd4270cd21a9960f96cbabfe
SHA1 754ea0c6be0941868263099d9596dd8754aded6b
SHA512 9bf379cfcfa87080a7d298c596aa71b089b4b80ef6f76d028783b38c5366905da40e9e26404d407f3dbe9961b7ea992205038690571e48fc8f32d24a1a211988
SSDEEP 1572864:oGMKP96G8O2EY5t9J283DqoUy91eHXiohY75:omozO5Y5nJ28zxjMXioKN
TLSH
T11CC7339A99AB4991C14206CA3BDF0F2E350F6265BC010963FB7D9D445B52FA093CFCAD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  OptiScaler.dll
- Size 24.5MB
- SHA256 8be99ae09d063317dba699e65e7a4cd44221539833ab513f213b35403318fc80
- MD5 305665d3af7d7d217899ea749b6324da
- SHA1 09d62035c74833b26029d9cc4a284cc0735ba455
- SHA512 c1e1346f5a4d0ab105a7669065a85a5571b1781ca250351efadb78ccc68e20cfb4d218bad9e10068b4da3bb368c60f4d89077b3c2f57862aad06dbf68cb0aef9
- SSDEEP 196608:0lK7FJRQTHhLoJZLuNerllNIp+sE/RyJdy6gdE/YX1iKT1MqsFyNpVZFvQt7qHO5:0U/aTHhLoJRmH
- TLSH
  T10647B70BB710AB36C1AD937BC8D75B20B335A0655FE30B83169C62292DE239959731FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  OptiScaler/D3D12_OptiScaler/D3D12Core.dll
- Size 3.2MB
- SHA256 07d286c306f8117321422affd9e6388c12d0fb4be1c7fc689d9e899324feeb24
- MD5 487f2b0ba0b5c31c33f9b1a6a0d796ef
- SHA1 1499c06c22ff4bd44114c3b8fd2f0929b222f09f
- SHA512 bd43465b348194cadfc0105818fa050b79418dabb16ba246599e75d7a5baf4f1ad4b1ee619bd9a6760e0360d6feadc9fef475efa4711892171070c0c4164e681
- SSDEEP 49152:pRkMRq29YS4CwhqhBxmtkPg/qKI1XvcyZDuygqUSXtpD8Y9bDuJ:NH2Sr1tQb
- TLSH
  T172F56C07BA9840E4D56AD1F8CE57470BE2B27864C77293CF26A0931E2F677E1593A331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  OptiScaler/Streamlined_fetcher_windows.bat
- Size 3KB
- SHA256 4052e172f464235c9b33bcefd63965250a592f11129d0dee032942db3453cae3
- MD5 529508c46f3b216a8e8d3fb9149f262b
- SHA1 09c6d81272542b7a796a78a277f29c90d82eb37e
- SHA512 a1b67692d905c60b3eeb4a29489d1b2149c2739a2d85c3ad69f10693233a0898db22e13deb44e63cc9261a282d4aaadcf1c6c3cf6c60245a78b4e480a01dd822
- TLSH
  T176618656794BA03A20B18F22EF680915F559D2CF05189E8CB57340AC3B323E179FD6BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  OptiScaler/amd_fidelityfx_framegeneration_dx12.dll
- Size 38.2MB
- SHA256 02297beedd285e822d3a64f314cf00faf378dcec0edc47ff0c4dd71b3a8c2f18
- MD5 6a12bc4dc82ae11e81c37930b439f6c9
- SHA1 3c5164dcbe1be9e930bd5058b3da7470e7e7103f
- SHA512 7997b18b564ee6ff771cd040da11e680fb65f580b75fc216134c5dd69ba9db664743b4fef39619ed5ef4d3482d17d4340093b96ec4b6029aa087a967fc11a80c
- SSDEEP 786432:2/+nKDQ5vNfmwR9ezBxDhBC/+nKDQ5vNfmwR9ern1k:22KE/vRj2KE/vR
- TLSH
  T19097AE5A8461C0E1F712FD7BC0C2D3B2F437247447632EBE86F9867BCA3929646D9162
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  OptiScaler/amd_fidelityfx_loader_dx12.dll
- Size 25KB
- SHA256 e2d85aa05a9bd9ed8b38935fdf5199372cca6f74c12015143bb6f945ee1608aa
- MD5 de911b016f4849d4dc7a358058c9e3cb
- SHA1 f0eee58b0cb1b31cfc8fcf02ce3a6c1c6fd4b0bf
- SHA512 b8ba270d4be2ed5a518a4a09106af696f8c228b690e3b6c2937306c8bcdbc0801530fc64a11eefe7d20a17d8c6db2123b295f5db41dec3a0944aff2bb0e9eeed
- SSDEEP 384:iE/E7z8Z5mXwJ4wxw1pwKNsZgmLjc4y8RbmL4nNyNmE:425xGOemE45ALn
- TLSH
  T16EC26E4B9EB01585DD93C9B4D4E31E166EB2B6202B9186CB1234C16D4F933D137BF3AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  OptiScaler/amd_fidelityfx_upscaler_dx12.dll
- Size 27.4MB
- SHA256 d0dcccc74a43c44ba435b7a369b456e0970d8a4464e4bd683119b374f2c9fb46
- MD5 429d308876434a1247f40bd543efdddb
- SHA1 4664f09a580ab54075305b9c27280bd1fca2723a
- SHA512 e1bc16455287d4e912e061ae734a5bbb54fdf6febd3db6e3fb3c8870db4125fea43f6109f3b332567c2e40776b5f21f461f363d70d117854180818b53e2b95b9
- SSDEEP 393216:mIWeKPkF3Kll2iXKAf5K8dK0TKyje0lSO:mIWFPkF6ll2ia9N0myje0v
- TLSH
  T1DE57AD4B0160D5E5F782FD3FC095C293F57328B507421EEE92F9D177DA0AA83199A2E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  OptiScaler/amd_fidelityfx_vk.dll
- Size 8.9MB
- SHA256 a1624cc4238fef046f30c4d80ce3f47be63fc5f5373f49e3ee9edb9960f54c78
- MD5 9718fd774c61be1af6af411cf65394cd
- SHA1 e85fe348a878e834b11ea43ce01a53ed921b390f
- SHA512 ecb2c551894447ec463abcd62a400f6e08467f5e559074465bcfbcd9a67c513d3d212e4e96ef3bce4fde0f8664b31ffadba5183b628adcfe3a2120edfd2dcb23
- SSDEEP 98304:KcVH+eZzbydopB+iWa+e2Ba+eJabbv1TJHbXv1T83:KcVVZzyuya+eOa+eQbbv1TJHbXv1T83
- TLSH
  T18696412AEB71CF2BD529073E94BB17687129C29EDF5357272128B4343E83335279929C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  OptiScaler/dlssg_to_fsr3_amd_is_better.dll
- Size 2.9MB
- SHA256 14e83096f4e7648b89a724208c6219508b44563ce8c44967c60a5fa46a9221e2
- MD5 88cb4a8c5891934097c8f39edde05615
- SHA1 625f266e99c4a6531786bff78832bcf01ec0fdc2
- SHA512 9378f42b202fb1cabd761b90928801d8b4df9d4e709a8706b280ef8d210fbb79a81a0e7f48d5d4d283ceb03d0ff6220deccd02795ae3ed6adc4785c7b8bcf71a
- SSDEEP 49152:PB9VPqE+sdFambpyHXuD20PzOF4gXau/FCyJMSC2bkMNV0PNgHYef+Z4eJ4YMe94:59VPqE+sdFambpyHXuD20PzOF4gXau/m
- TLSH
  T136E56B15EAA44B2BE63A833E84FB4660B235F09D9F53579B2368F1787E033601B57358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  OptiScaler/libxell.dll
- Size 405KB
- SHA256 d2030dcd694fda8f2ec7e044b13e6db8f0b56d4ba9113a5efad334e3f3ded8c7
- MD5 831a165eb6832a5c1ec46eee2a33de30
- SHA1 e448d460f6406095ab22466120e2501b4f40d9f4
- SHA512 aa208bd0bd470f3b42eda1cfa7eab4002b313a129fb0d97ff86005d8ba5726f29c7c69c5d0b66551e8d5b43f4cb533cd2118af4e1b888a58a36f4203f38d2d53
- SSDEEP 6144:CL0nG366CN0ktJlxO/ZCYS3nAVAxrwOUknkRGtEPbEKdKgUBC4a:c0nG3N/yJlxUCbAVAxrE3nEKd381a
- TLSH
  T185947D1AE62C4995F4BBD1BC8953474AE6B2B406432186DF01E08DEC1F27FE8793DE94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  OptiScaler/libxess.dll
- Size 74.2MB
- SHA256 251659dd84a3e84de67c886a4186e01f3eca49b00641906fe38bb6b807e5d5b7
- MD5 d9e2aca10667501dced0e5b69b7d3ea5
- SHA1 9798b95e083a69e00c93cb28fe80318b6f53263d
- SHA512 4e6798af5c5cc428d46266bc2e06800125d1efc94e51f5b1e8725b41aebede037bd64db82d04f0ece7cead284ca6f1875000dd1f7d428ca5fd5fa7df99d20bc3
- SSDEEP 1572864:r0P6XNBi1dPIYuDpLSXlLNmHRywvQp8xgchTxD6vadGzm1W:r0P6XNBi1dPIYuDpIQ8w4pSMSdGC1W
- TLSH
  T106082315B29928B9E93BA1FC510B9B9EB5D6BC5303A449DB06B107C14D36BD8883FF0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  OptiScaler/libxess_dx11.dll
- Size 152KB
- SHA256 c7cfe86f0c9d94e4fb3696d3cd5035e2bbb6a8b1b0572f8b7395a4cdfd0c625e
- MD5 e04c7f44bc073d164cbf603215e96eaa
- SHA1 fca6ea9bc711b2e9c50e778a330184d8371f301a
- SHA512 ad6675acd6e1a37029d3d97e9109a7ad1ab857a411c18e77c53b56689a7271e2e9ac96d96dbbbce3943eb652a617989f1e2b06055ef19ac43e975a1430db045f
- SSDEEP 1536:l1X7ezCdcHIzJUT7+N09+GbTxiA07VX8dg8eAyMHI5C4Vs:lF6CcHIzJa+N09+GoJ8leAyMHI5C4Vs
- TLSH
  T1EDE34C6AF2284431F875D0FD959207A9F27270409722A3CB5590C2FD1F57BD9BA38ECA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  OptiScaler/libxess_fg.dll
- Size 21.9MB
- SHA256 ec5e0c65e075570c6ede72618bb666d0be0c2e10b2ea9762c0fe8cb8e375ab27
- MD5 e5da7e91e3af8a8340b3fef922912e6e
- SHA1 789995e8b0faf233d0a2082286c7e10f55cd005b
- SHA512 fe4c7f5083ac528922067dd7d576d232e427fca6460643fdfeeef7f8da45342a760316eec48f4b93e9ff86172806916d4ff813b334448709ef432f51708aaf28
- SSDEEP 393216:5072scaZWqGtrmBwhPN+eiZbMHHEV2T6vtI2scaZWqGtrmBwhPNNa2P2sAm2aABe:UiaZWqGtrmO47BMHx+tIiaZWqGtrmOz1
- TLSH
  T1C537D1127B8CA905E42C2B39445A5B5D93B2FD891732CBCF2AC56E9B2D6F7C25D32340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  setup_linux.sh
- Size 12KB
- SHA256 0571b0ae077d985616acf9f4101e8338fc225b1b22aa7b339100c7ea3f3022be
- MD5 f9a9bda46ccded2442727f6192bfe00b
- SHA1 f790978c9d0f6bedc3c0ac596ab5ca31cb9259e4
- SHA512 3acb92c0d5b1036692d9d01f79d34b0cc47e132bc000f4d668af93c34943510c1cebcd1365297119c81e3b6066631c63aaddc828d96ffadde3addb3829687815
- SSDEEP 192:20Rne9rag8tTiRo154XFs0aRdr8uN+1iTn64A5t2xvHTKm7s:zRYBYrTyH2Nmx
- TLSH
  T1C6420C44B4594EBA031DD2F9E992E8E86A0D813F4C635D3C744FC0EA2F616D770F8299
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution persistence
- Drops desktop.ini file(s)
behavioral13
- Target
  setup_windows.bat
- Size 16KB
- SHA256 8f34ddfdb02119e34d37d196aa7073a29b9e8f8609ed2f8d1377443d12bcc89b
- MD5 45b30004c58120337ee763f201606af4
- SHA1 4dd381ade0c44d241365b780ee8d095619ef545c
- SHA512 49a41516477465e06e745ef1460860696838d544295cec5c2d07da66b010dabd23f42675958dc38e6e0e1b6a171d04e130abc04cd584c085f99c89639bff035a
- SSDEEP 192:i64uL2VLFFeXsq1LvKDkBawvl75jCsDumGaggdHQtzk:B4Nzq1LvKwBXvl75jCsKmNgiH0Y
- TLSH
  T12A72ED693119152A4BB88BE5DC748895F60E80EF02239D3DB44FC1E82BF65E671FA0D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14