Overview

overview

5

Static

static

3

boostbot.rar

windows7-x64

3

boostbot.rar

windows10-2004-x64

3

OpenMe.exe

windows7-x64

5

OpenMe.exe

windows10-2004-x64

5

boostbot.exe

windows7-x64

1

boostbot.exe

windows10-2004-x64

1

libcurl.dll

windows7-x64

1

libcurl.dll

windows10-2004-x64

1

zlib1.dll

windows7-x64

1

zlib1.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    boostbot.rar

  • Size

    28.1MB

  • Sample

    240810-btdx9azajr

  • MD5

    116b7513284c20d1e715332df116b7a0

  • SHA1

    3c1ec0496dc8a51288ed3497b640a0577d75107b

  • SHA256

    747e7d0915d7860e3e37c26f0c9932249b7446412c0bcf68c9d54784a8b836f9

  • SHA512

    aba0eb5a48a9778b4a5a796a95c870d9d7e8f82086173361eaaa2ab02622dbe2be5a97e4a37d28a214f77b49cf3afe8f5e22026f0ef2f18ed4a280bb42a750f2

  • SSDEEP

    786432:8upL3GNYgbY7Y1fEAs2AtAK9ZRZOBu9FSaBovlC6Yt3yl:8uAvMgf22bARdovlCzCl

Score
5/10

Malware Config

Targets

    • Target

      boostbot.rar

    • Size

      28.1MB

    • MD5

      116b7513284c20d1e715332df116b7a0

    • SHA1

      3c1ec0496dc8a51288ed3497b640a0577d75107b

    • SHA256

      747e7d0915d7860e3e37c26f0c9932249b7446412c0bcf68c9d54784a8b836f9

    • SHA512

      aba0eb5a48a9778b4a5a796a95c870d9d7e8f82086173361eaaa2ab02622dbe2be5a97e4a37d28a214f77b49cf3afe8f5e22026f0ef2f18ed4a280bb42a750f2

    • SSDEEP

      786432:8upL3GNYgbY7Y1fEAs2AtAK9ZRZOBu9FSaBovlC6Yt3yl:8uAvMgf22bARdovlCzCl

    Score
    3/10
    behavioral1behavioral2

    • Target

      OpenMe.exe

    • Size

      21.3MB

    • MD5

      6846908b223e58f24f7e224d9d402225

    • SHA1

      7fde424cacf6c5766db7d24dc5e03ecfd2898d15

    • SHA256

      55d8eee45262b53bef2f2391a01b723e019b95e87145d32fb18fce3eb9063cfd

    • SHA512

      156436f2e45b7e01d5cc52ef283ae155f694fdc1babdf06f77a1c0e43532ec2d436e30a520cf05817804b99525fcc349af6d37b8800e207485001bff7ed2b0ae

    • SSDEEP

      393216:2itMU6rX/ULYPDFYN4OgVKikmWekMIqS3r+6qhFsbo:2icX/Uo5YN4OakmWekMKr+6cqbo

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4

    • Target

      boostbot.exe

    • Size

      12.5MB

    • MD5

      94f59f3657f306436ed45335417c4c33

    • SHA1

      582ac2a63298628a4b3958240df329524e071ae8

    • SHA256

      e5b6be17d59c88c2d0a3f1a1bd1b8cfee1e5c25d7476a8097a1997b9e6743803

    • SHA512

      beab6c6856db1fbb164c486f6c5978c2add9f85301b1b1e13d2b7d4f0692566893a4e210da5e23bced9b68bcd2e9632fea0119cd12a6414d2a2683da525e66c5

    • SSDEEP

      98304:aOVqV2mcFU6ezHwBqxfKoEEUUWGy68KVCq7HlrZ90xqjdJPSo3MkyE9TiZaKc5uD:aB2bFU7HwBmrUVOVHFrzZck7NWaKcwb

    Score
    1/10
    behavioral5behavioral6

    • Target

      libcurl.dll

    • Size

      546KB

    • MD5

      0798c843d2a0579fb1ec931586eff2fc

    • SHA1

      ad2d157dac7992ee59ce76a1170edefb4dd69ead

    • SHA256

      7b6dcaf6c1f355f86c4a645ddb62da5dca9cd0b6935d765e332605a5f0154829

    • SHA512

      0e7238373bef06d61b7d312e9b8b9dcd46e26396e0b371ba5396dd716758d01a0a790b21412f04238e913f16d95bf5c919302947d0e24102c19dfa57c0ec0187

    • SSDEEP

      12288:mIEuXoN7eLmPPIy/KN2nalkLPrEOkTR1VEjFnPmVEmgNb:FEAoleL2PIyyNrlkLPG1VEjFnPmVEmgB

    Score
    1/10
    behavioral7behavioral8

    • Target

      zlib1.dll

    • Size

      87KB

    • MD5

      05865c829948d063201327e8d89e20eb

    • SHA1

      88d252b494a71d8a63de45f800d570ab63bdd73c

    • SHA256

      a961f2e27053882c8f4a40a7fd148bcb83df6e75af62fe8e7c9ffc350882f577

    • SHA512

      e3ba06c68375426b6452c725f23c7a7d30ed32dad068eafac57ec37f2ca0d97ee5fe287cd1ba9299af046e21f7ea3fb928c70170ba6979fad40ceeee035f68c7

    • SSDEEP

      1536:c7wjHHWwn1rhEzjEp70E2thqlz42qIOcIOZBzelMPyw:ccjH2w1EjEpIqK24SZNCMPyw

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks