Resubmissions

General

  • Target

    Boost bot leaked by LT.rar

  • Size

    16.4MB

  • MD5

    21ef1e69b71dc155a733431adc931d22

  • SHA1

    48969bf6461ddd459a8a80ce853ef430fb39cf23

  • SHA256

    33dc853be9571e4fddcb07ab14fb1d1364394b8904eff403a04129a0efc49c81

  • SHA512

    d57ecf799f6b23d64437a7cbfce007b7c14cda47dda22a5e5ac341bd0bf658d2f5f975462039e59934f1212a45c5846df9db8e2378284121822afb3ea4588135

  • SSDEEP

    393216:kj8ZbX6ERnGrk2Du+ilETd9ieVljRzai27nyMilUxgFa81oU1:kSVcrfy7lid97LJaiAR38H1

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Boost bot leaked by LT.rar
    .rar

    Password: 122

  • BoostBotSell/install.bat
  • BoostBotSell/main.exe
    .exe windows:5 windows x64 arch:x64

    Password: 122

    389e531b62f67eb598bee93bb6b28427


    Headers

    Imports

    Sections

  • main.pyc
  • BoostBotSell/pytransform/__init__.py
  • BoostBotSell/pytransform/__pycache__/__init__.cpython-39.pyc
  • BoostBotSell/pytransform/_pytransform.dll
    .dll windows:4 windows x64 arch:x64

    Password: 122

    0f7a3d01e95a1b06e9ee00e9ffd63a4f


    Headers

    Imports

    Exports

    Sections

  • BoostBotSell/readme.txt
  • BoostBotSell/requirements.txt
  • BoostBotSell/settings.json
  • BoostBotSell/todobeforestart.txt
  • BoostBotSell/used.json