Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
10s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
11/10/2024, 20:38
General
-
Target
NitroBoostGen24.exe
-
Size
23.5MB
-
MD5
3d616d8ba8411a4b431b8bba0adc1ef3
-
SHA1
2599930bd8518815ce081b86d72dfbc8fcf61d86
-
SHA256
0a7aa8f6bfea8d0ba1b452e540352a132ff7be02cfd7f9f2b7eb9e01fcad7520
-
SHA512
744e61ebaa4079d0ce5735dde1f50333f448f96a318a387a1121e21860ddc77cfac5908fb3b370dff5598329cd2317779d9571c8a6dff2943df33958a765d089
-
SSDEEP
393216:pa92Yg5BHtSTurEUWjE+8PvIxjDTVggMHDDgSezga6yWH9SFPTw6xG:s9SVGdbE+KvIFVOj0Sezgak9SFPJ8
Malware Config
Signatures
-
Cats the Freakster 12 IoCs
my daddy freakster was mentioned in this file 🥵
-
Loads dropped DLL 49 IoCs
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NitroBoostGen24.exe"C:\Users\Admin\AppData\Local\Temp\NitroBoostGen24.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\NitroBoostGen24.exe"C:\Users\Admin\AppData\Local\Temp\NitroBoostGen24.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
MD5be8dbe2dc77ebe7f88f910c61aec691a
SHA1a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA2564d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
SHA5120da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
-
Filesize
48KB
MD5f8dfa78045620cf8a732e67d1b1eb53d
SHA1ff9a604d8c99405bfdbbf4295825d3fcbc792704
SHA256a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
SHA512ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371
-
Filesize
37KB
MD56880e3d5872fefa9810753e181cf3033
SHA1e875467792bbe3c4117040f6cf935a7a60a21d55
SHA256c7000207e8c406f3a18b006649248906963834ff901c7b8b9f627d534e31575b
SHA512f501bfe8300b20a621d587d9a86e1228ab90da5f4cab8ed47a2822617ca5eeaf66691756228745ff24084ba481f6b3eedcddfc4a4869cd56334e8ca53a92148d
-
Filesize
48KB
MD5ab542da47a7745a2f588ca78d41734e0
SHA1d8f1601548510333e35199e3b6bb4eaf994ca9ae
SHA2564aba601dd528a85dad5975daf6aa394002c8a38582e4abb05a89684f52130084
SHA512d80228ae846c562e08b08b92796e871e546760cd8ed92cbbe526675947ea2a5524ff4a93210e820c9f646912db24ff112ed2a354fc018a53a5161934c7fbd0f0
-
Filesize
71KB
MD55225e3fc11136d4ad314367fa911a8b1
SHA1c2cfb71d867e59f29d394131e0e6c8a2e71dee32
SHA25608005b24e71411fc4acdb312a4558339595b1d12c6917f8d50c6166a9f122abe
SHA51287bdeacaca87dc465de92fe8dda425560c5e6e149883113f4541f2d5ecc59f57523cde41ad48fa0081f820678182648afbf73839c249fe3f7d493dcf94e76248
-
Filesize
59KB
MD5fc609234e81821c069d54a7c8d4a7e05
SHA19aef96aa0276feb2df28ce0abf4ec1f2f766d011
SHA256506cdca8f4cc4754a78edac3be230a5ec7ca4a0d61ef08fe0accab4080b2c69e
SHA512bea687c1a9ed32db6c99be1c8689ac9e498f0ffce74c0c66c6c7653d58b6ee90e50df66c8a48b49854d47142fa9a930047f4828651193f7a500ae7fbc1882d2e
-
Filesize
107KB
MD5e3245ba10c125de02593c0a67669ab17
SHA16b846b98ee8f663aa39d3c6c960df8bc84d82193
SHA256306cc1df8631d632e9831d6a710c8776784c4655b107424290338c385e743026
SHA51226c4d7280a93dc004b0a92689c43b9bcb6c0afa282d24581051fd18d0037499c2c77431636ca20a9225af002f254526cf66ff466b3b7fad0d73b8096ce1594fc
-
Filesize
35KB
MD5fa6ae459e8a2c3071bd373da5a4cfe18
SHA1dbf6462e952efe70f4ad72c0c8688456833462d5
SHA25620af24170652420bc06adbb2fc159ae9e61e71f2cad5370b423c9ce4c57ad5e1
SHA5129846f7fcf86fd67b03080a6ec270e4c6ecb0fee7bd0019fddd976c26e062c5d41f35691384a2307ca80289010f73cecf7326d7f446971639698b2948c4f67c08
-
Filesize
86KB
MD5ed15089e3c0c1b2ab5b73354abf0087b
SHA1f51ade203d249e27ebf9ae2159220fabdb8726c0
SHA25602fe60ad99452d53294514e8c6b8d95d79cc013742e3a4cd74b36601fc3fb09b
SHA512a9f869b2988057c37d14ee56495ecbf2ec688517203a7e2d1bc1488f4d37c6e3d3fb6fb439442c86679a9cebbbd5b2e7b11d42f64bdbce7212b6411cd27073ac
-
Filesize
27KB
MD5a2de86f88aad5c050f86d258b1f05617
SHA111824bbb09e5ee9865cadcbbfda1e0664c6d98ff
SHA256f10fc80b19740eceb7fdce89c30d6670c9af7ed600fa7f881d27b8b5a054495f
SHA5123662a8e6afa6b385a3e2682a49b0ae57f0f2aefc029eaaf841a228ec76c0f79c4e963b6f22eb345f4cad72b35bd72576a79a282d9816cf9b37b762773c10a80b
-
Filesize
33KB
MD5d2b3134bae2e401e1753aac8b9ca577e
SHA13b4c4fe61c724a6bc4ee423ee7a1efb007a1f515
SHA2562386cf6ceaef4c6aa13974f913d6b3e6cde3b48e2fbb73f5c63ae6fe4384836f
SHA512215609827121d9da6fa0bc884bd388391c46a799c22d54762775d591d9ae5e6bbce70011bc5f5237b6e526b79416c00f5daa8fc6baf70450ce37ced17fafa1f6
-
Filesize
26KB
MD56cff25f6eb2872a07d52591cffe97ed7
SHA11e51fc338bcf4e868a827c8dd2d3573a60ec9a73
SHA256b58694a5585645827ce1f0aa285e176e9328584917a36434132fd71c3f017d8d
SHA512e847437f88dfd473272ed89f06fc9939c2e58e71f309275afa89599b4d79365459f763815660499be69b93b2440f3ed0dec88192d7d5b2be6ac2b79009a6442a
-
Filesize
44KB
MD5552d390e9c359bf460b87cfb9a24a48b
SHA1d4920c3355b18087e9a392bea152cef90cc04a60
SHA256f11b57f08a31e172cabae66830f9ef936e322a4df03ba5230d1621db4e7a24b6
SHA512cfc59e43ab855f1c571db92c0df1258e88bc6db9d8569c2a5242b90d22f327503f4b4402f79f816f53f12a43f3d1ca84066231f0a3e719758340813f79528d8e
-
Filesize
57KB
MD5435b49a7f84e7fbe0c6681932de37179
SHA1a8a285579de10dacbfd053735c6f0ab930fe0fe2
SHA2565321e5c26a9bcaebb58f11241121bd0d1e45f98dcfbb4d8457eae42f17b8328a
SHA51213d7d7120a7a150d789b92964acbe6d2ea7ebb130d6cb1833456ea1cdd6654cdd1d8841165296b3f077935dbaec4a37ca7e45c395c0b72d9b6dc970dbb76136a
-
Filesize
66KB
MD5318cfedf19856dbbc627e79ed9fd2b9c
SHA1fb9b5565a033a8c6a4aee3f0a27de047714442d1
SHA256efa7fef1f1456e19c44a787b62d047f5d73c6abb6a6d4201d125dc3d101fff09
SHA512d5d616400fa33751bec6ce8786d4c29e6307f2042db0602907354734ff72387570201420290f5e99c375059ef7217159e254c44291b36f7f296574f506211e10
-
Filesize
25KB
MD550521b577719195d7618a23b3103d8aa
SHA17020d2e107000eaf0eddde74bc3809df2c638e22
SHA256acbf831004fb8b8d5340fe5debd9814c49bd282dd765c78faeb6bb5116288c78
SHA5124ee950da8bbbd36932b488ec62fa046ac8fc35783a146edadbe063b8419a63d4dfb5bbd8c45e9e008fe708e6fc4a1fee1202fce92ffc95320547ba714fed95e1
-
Filesize
28KB
MD554ba74f0c557b0c0463c08b5d2439379
SHA18aa3f3f50501962f4a64ead15b24b6a77b06c5c5
SHA25653d4c23bc2ba89ee5050bae9b498eebbcde5a1906e51389742780f0c976b861f
SHA512fa4b6ca32a635f3a17d1e50b2b0a0c9e184cc104c2632b1d57c2a14db30272e6985a5665c567f49a5d4a6f36bfe80db9b5c591856d1667c024631a7050efb5fe
-
Filesize
1.3MB
MD543935f81d0c08e8ab1dfe88d65af86d8
SHA1abb6eae98264ee4209b81996c956a010ecf9159b
SHA256c611943f0aeb3292d049437cb03500cc2f8d12f23faf55e644bca82f43679bc0
SHA51206a9dcd310aa538664b08f817ec1c6cfa3f748810d76559c46878ea90796804904d41ac79535c7f63114df34c0e5de6d0452bb30df54b77118d925f21cfa1955
-
Filesize
287KB
MD52a6bef11d1f4672f86d3321b38f81220
SHA1b4146c66e7e24312882d33b16b2ee140cb764b0e
SHA2561605d0d39c5e25d67e7838da6a17dcf2e8c6cfa79030e8fb0318e35f5495493c
SHA512500dfff929d803b0121796e8c1a30bdfcb149318a4a4de460451e093e4cbd568cd12ab20d0294e0bfa7efbd001de968cca4c61072218441d4fa7fd9edf7236d9
-
Filesize
9KB
MD5e4fad9ff1b85862a6afaca2495d9f019
SHA10e47d7c5d4de3a1d7e3bb31bd47ea22cc4ddeac4
SHA256e5d362766e9806e7e64709de7e0cff40e03123d821c3f30cac5bac1360e08c18
SHA512706fb033fc2079b0aabe969bc51ccb6ffaaf1863daf0e4a83d6f13adc0fedab61cee2b63efb40f033aea22bf96886834d36f50af36e6e25b455e941c1676a30a
-
Filesize
39KB
MD55c643741418d74c743ca128ff3f50646
SHA10b499a3228865a985d86c1199d14614096efd8a0
SHA2562d86563fdfdc39894a53a293810744915192f3b3f40a47526551e66cdb9cb35c
SHA51245d02b854557d8f9c25ca8136fa6d3daed24275cc77b1c98038752daed4318bd081c889ff1f4fa8a28e734c9167f477350a8fa863f61729c30c76e7a91d61a97
-
Filesize
1.6MB
MD563eb76eccfe70cff3a3935c0f7e8ba0f
SHA1a8dd05dce28b79047e18633aee5f7e68b2f89a36
SHA256785c8dde9803f8e1b279895c4e598a57dc7b01e0b1a914764fcedef0d7928b4e
SHA5128da31fa77ead8711c0c6ffedcef6314f29d02a95411c6aacec626e150f329a5b96e9fdeae8d1a5e24d1ca5384ae2f0939a5cc0d58eb8bdbc5f00e62736dcc322
-
Filesize
29KB
MD5be8ceb4f7cb0782322f0eb52bc217797
SHA1280a7cc8d297697f7f818e4274a7edd3b53f1e4d
SHA2567d08df2c496c32281bf9a010b62e8898b9743db8b95a7ebee12d746c2e95d676
SHA51207318c71c3137114e0cfec7d8b4815fd6efa51ce70b377121f26dc469cefe041d5098e1c92af8ed0c53b21e9c845fddee4d6646d5bd8395a3f1370ba56a59571
-
Filesize
222KB
MD57e87c34b39f3a8c332df6e15fd83160b
SHA1db712b55f23d8e946c2d91cbbeb7c9a78a92b484
SHA25641448b8365b3a75cf33894844496eb03f84e5422b72b90bdcb9866051939c601
SHA512eceda8b66736edf7f8e7e6d5a17e280342e989c5195525c697cc02dda80fd82d62c7fd4dc6c4825425bae69a820e1262b8d8cc00dbcd73868a26e16c14ac5559
-
Filesize
35KB
MD53f1ac4c725b12549bd2f014375fb25ac
SHA18d1946239bdd69321966540fd896e5e192936d89
SHA256fb453249583243a313d2f4f6c5ede5c45afd4219a278c31ae5ce88a17e933df9
SHA512496ba83ecc530c6cab8a4d1d2e9588c80b7bbb91b05f3d38c64d07d6c1fbfb4c6f75f4188130286fe54a46af6885f7b36017bf4436ad3c8bfa809796807404b4
-
Filesize
9KB
MD52792ecc8fd33e03d84a8554dc8518db4
SHA189465011321f5cecdad86e6f835aa1d8d0ad13d2
SHA25636c5354b5f4dd1bc66ebbc73474bd9d663662769833045735ec6751a3bf69d76
SHA5121c65466454ae5da134d7cd59d663d82cff87e95fa8060befa9aa82a3793dbf8a987936df29b04ec5b0be42cfa8af16f18b3e7c4c7b7b5c6bf03a042b8070c879
-
Filesize
32KB
MD53343d0b8c531b780b2a6b3cda19d7b7f
SHA1bdb760d25d3d9da136901f43d505493159fe4fd7
SHA25653b59145c034e9374b29cdb2a9901d6591670b42306b4ab97a89e671e0f5e775
SHA51284f76063d2bd413717ba1c247682a7f2845f87bc19048adad532ff79e7cabf687848356d9a9b82781acca5843c425da4c0e52691bee8065787be7d7a6d0f76fc
-
Filesize
31KB
MD53adca2ff39adeb3567b73a4ca6d0253c
SHA1ae35dde2348c8490f484d1afd0648380090e74fc
SHA25692202b877579b74a87be769d58f9d1e8aced8a97336ad70e97d09685a10afeb3
SHA512358d109b23cf99eb7396c450660f193e9e16f85f13737ecf29f4369b44f8356041a08443d157b325ccb5125a5f10410659761eda55f24fcc03a082ac8acdd345
-
Filesize
88KB
MD57291100352b163626455abf2252f2a96
SHA13c4d13bbf5fb69fe6f2af70f675ed2e437cea893
SHA25601974148486d569e9f1ad62d36d4d54b5396b07c853bd50f358d5580fde331f4
SHA512fc384703828bb7a38b51dcf1a131b49283808b5658395e1d1c5ee9a204f895da0c29b12a7b1fc9aa468babc5d6f03be638fecf519e41911bf015a481f95458bc
-
Filesize
66KB
MD5a07661c5fad97379cf6d00332999d22c
SHA1dca65816a049b3cce5c4354c3819fef54c6299b0
SHA2565146005c36455e7ede4b8ecc0dc6f6fa8ea6b4a99fedbabc1994ae27dfab9d1b
SHA5126ddeb9d89ccb4d2ec5d994d85a55e5e2cc7af745056dae030ab8d72ee7830f672003f4675b6040f123fc64c19e9b48cabd0da78101774dafacf74a88fbd74b4d
-
Filesize
1.7MB
MD58f165bfadf970edafd59067ad45a3952
SHA116c1876f2233087156b49db35d4d935c6e17be6a
SHA25622470af77229d53d9141823c12780db63c43703dd525940bc479730d2e43513d
SHA512b3af95dc9a68e21e8eca98e451b935f72663c2552ebf26de299716f17193f238d55c292df953d641defcbcec3ea18eb37cd4b839800804efa8f40658427263ae
-
Filesize
25KB
MD53b214dfb6ec4ca67be55b3aa52922827
SHA1f665ffeab25d2bab506b873be944280586eb50f6
SHA2567507a92c4787e9e7936a0b4a8eeb0a3f24e5ee12ae58cd7988543581d99817ac
SHA512de4e9b9d79b01d21aca74179c6a3e8fc6fe041f71cdd78910fd893cda90c2cfe7e54ade91064333f37ffc880d446879a64dd8bb790677039df56df1f80ec6b45
-
Filesize
644KB
MD5b26fa7619d82c7272b7279eb7aae801c
SHA1fa6a3240a531615a0853306f3b3d66aed98a04d8
SHA25674dc76a2a2d06d61f9f06bd3b0972bfb30ab57b0e5cb8c3011e79ce4a52924f0
SHA51220b0d6cf3e07ca0d565f140c9f9c1e218406ed9bdaaf75433858acb250bfb71bb134a6479fdcf6d4d0e0252707b1fb14f9c9d3e4d6a40824c3fdc7a43dfad0ee
-
Filesize
295KB
MD597f08bbcf9903c768668b1cd1e30aada
SHA184e2dc5c3662bd39ac09b5f682a59104ffec16d2
SHA256c5c2997c3b16eb8b89fe230582a579a753efc8317ffd95d9795ec2762aa54ed9
SHA512076ca0017ae252d62d4a3bd7a42af95800e39a164bda990a0ca651aa2f0df2736c0dfdc086d8328a1834ae89f17716c5f76e798460a90263d1d8b6f2c233c686
-
Filesize
174KB
MD54dd9c42a89ddf77fef7aa34a71c5b480
SHA1fc4c03ffcf81fb255b54c4f16f6ed90d5a1f37d4
SHA256f76dc6f9ace0d356dbfdea443c3d43232342f48384f4afc7293b2ace813477e7
SHA51202c04fa2fa1d8136730f2596740049664a4f9343fb56de195988d80151cb38e67e7fee1c140d2c5d7c439f19df377cc6e253f5178711f72b821eae3076b4e142
-
Filesize
48KB
-
Filesize
72KB
-
Filesize
52KB
-
Filesize
6.8MB
-
Filesize
5.2MB
-
Filesize
80KB
-
Filesize
820KB
-
Filesize
204KB
-
Filesize
148KB
-
Filesize
88KB
-
Filesize
72KB
-
Filesize
216KB
-
Filesize
540KB
-
Filesize
104KB
-
Filesize
52KB
-
Filesize
60KB
-
Filesize
44KB
-
Filesize
180KB
-
Filesize
156KB
-
Filesize
60KB
-
Filesize
1.1MB
-
Filesize
180KB
-
Filesize
104KB
-
Filesize
96KB
-
Filesize
80KB
-
Filesize
5.2MB
-
Filesize
1.5MB
-
Filesize
144KB
-
Filesize
204KB
-
Filesize
148KB
-
Filesize
44KB
-
Filesize
820KB
-
Filesize
60KB
-
Filesize
112KB
-
Filesize
44KB
-
Filesize
6.8MB
-
Filesize
44KB
-
Filesize
540KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
156KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
1.5MB
-
Filesize
144KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
48KB
-
Filesize
164KB
-
Filesize
184KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
112KB
-
Filesize
44KB
-
Filesize
96KB
-
Filesize
88KB
-
Filesize
820KB
-
Filesize
6.8MB
-
Filesize
100KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
1.5MB
-
Filesize
144KB
-
Filesize
1.1MB
-
Filesize
156KB
-
Filesize
44KB
-
Filesize
540KB
-
Filesize
72KB
-
Filesize
204KB
-
Filesize
5.2MB
-
Filesize
80KB
-
Filesize
52KB
-
Filesize
52KB
-
Filesize
216KB
-
Filesize
60KB
-
Filesize
180KB
-
Filesize
104KB
-
Filesize
60KB
-
Filesize
148KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
184KB
-
Filesize
164KB
-
Filesize
72KB
-
Filesize
52KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
44KB