Analysis
- user interaction
yes - max time kernel
898s - max time network
475s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
24/09/2026, 02:33
General
- Target IObit Driver Booster Pro 13.6.0 Portable/App/DriverBooster/AutoNts.exe
- Size 1.2MB
- Sample260924-c171cacc45
- SHA256 d13acdd8af8f452e89907b987f4327fbb7e065e29057ff62764de07a4eb90fe5
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IObit Driver Booster Pro 13.6.0 Portable\App\DriverBooster\AutoNts.exe"C:\Users\Admin\AppData\Local\Temp\IObit Driver Booster Pro 13.6.0 Portable\App\DriverBooster\AutoNts.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1312-0-0x0000000050008000-0x0000000050009000-memory.dmp
memory/1312-1-0x0000000050000000-0x0000000050117000-memory.dmp
memory/1312-2-0x0000000050000000-0x0000000050117000-memory.dmp
memory/1312-5-0x0000000003FA0000-0x0000000003FBA000-memory.dmp
memory/1312-7-0x0000000050000000-0x0000000050117000-memory.dmp
memory/1312-6-0x0000000050000000-0x0000000050117000-memory.dmp
memory/1312-4-0x0000000050000000-0x0000000050117000-memory.dmp
memory/1312-8-0x0000000004010000-0x000000000412B000-memory.dmp
memory/1312-18-0x0000000050000000-0x0000000050117000-memory.dmp
memory/1312-16-0x0000000057800000-0x0000000057812000-memory.dmp
memory/1312-15-0x0000000057000000-0x000000005703F000-memory.dmp
memory/1312-14-0x0000000059800000-0x000000005986E000-memory.dmp
memory/1312-17-0x0000000050120000-0x000000005030E000-memory.dmp
memory/1312-12-0x0000000000400000-0x0000000000568000-memory.dmp