Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

boost-bo.exe

windows7-x64

10

boost-bo.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    boost-bo.exe

  • Size

    4.6MB

  • Sample

    230628-ywyrrsah76

  • MD5

    cfd6e46ebad87e50cd5aa8d6b874d409

  • SHA1

    e2adb61cd2c84a6d00f6b646c0fc50d2065ef382

  • SHA256

    aa203ad2aac0bf8b392ec2add640ba020c2ed9938bea18dbf26631e9faa70f9d

  • SHA512

    679eb63a890cd85c24e94d96a1af7f6b125f0818eb1652626da7e99144e6378ee89f2949bc812c40b0761db84fb3f2b5a389ccad6cd192ff02a74d7e67d8ec1a

  • SSDEEP

    98304:z6+CSZXttEB+1r2oid4wr3v5wvVeqgkqXf0FGIrjMW94z9OUj:aSZnl1Coid4w34gkSIrYW94

Score
10/10
agentteslaagilenetkeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      boost-bo.exe

    • Size

      4.6MB

    • MD5

      cfd6e46ebad87e50cd5aa8d6b874d409

    • SHA1

      e2adb61cd2c84a6d00f6b646c0fc50d2065ef382

    • SHA256

      aa203ad2aac0bf8b392ec2add640ba020c2ed9938bea18dbf26631e9faa70f9d

    • SHA512

      679eb63a890cd85c24e94d96a1af7f6b125f0818eb1652626da7e99144e6378ee89f2949bc812c40b0761db84fb3f2b5a389ccad6cd192ff02a74d7e67d8ec1a

    • SSDEEP

      98304:z6+CSZXttEB+1r2oid4wr3v5wvVeqgkqXf0FGIrjMW94z9OUj:aSZnl1Coid4w34gkSIrYW94

    Score
    10/10
    agentteslaagilenetkeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • AgentTesla payload

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks