Overview

overview

7

Static

static

3

b0aware.exe

windows10-2004-x64

7

b0aware.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/11/2026, 22:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b0aware.exe
  • Size 123.0MB
  • Sample261110-2ffg2abh66
  • SHA256 30bac9ad18dc592aba730465be43613e45b606fa8feac570c4d2677452e992d4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b0aware.exe
    "C:\Users\Admin\AppData\Local\Temp\b0aware.exe"
    1⤵
    • Loads dropped DLL
    PID:5636

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Dozu.NativeR6Suite.dll
        • Path C:\Users\Admin\.fatassware\Runtime\Dozu.NativeR6Suite.dll
        • Size 1.4MB
        • SHA256 6741d5a2750f7d410ac3476ce23797eadf7842681d02aaa23dd9322de4bcaaa2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Inter-OFL.txt.fatassware-update-5636
        • Path C:\Users\Admin\.fatassware\Runtime\Licenses\Inter-OFL.txt.fatassware-update-5636
        • Size 4KB
        • SHA256 262481e844521b326f5ecd053e59b98c8b2da78c8ee1bdbb6e8174305e54935a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        runtime-retired.json
        • Path C:\Users\Admin\.fatassware\Runtime\runtime-retired.json
        • Size 45B
        • SHA256 b1ef9fca2005f5145c3ff416d3d36e76c4e3ba48d981d044c869d6821b5f73e6
        • MD5 SHA1 SHA512
        Submit Download

        settings.ini
        • Path C:\Users\Admin\.fatassware\Runtime\settings.ini
        • Size 1KB
        • SHA256 d4aa0bad03a4b231c31fa384774636cfa5f3e4c1bc37f2a6b49235c97307cb46
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        settings.ini.tmp
        • Path C:\Users\Admin\.fatassware\Runtime\settings.ini.tmp
        • Size 2KB
        • SHA256 5dd3a3b9e173516ff304c115581bca25454a5d5fd633359994248230fe951410
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/5636-474-0x00007FF6C9990000-0x00007FF6CA990000-memory.dmp
        Download