General
- Target VoiceBoost.exe
- Size 204KB
- Sample260417-k971psds41
- SHA256 c41a423557cab5da2c3b637f708437af49b97c757d97d795cfeb1232bee95cbd
- MD5 a8e73de3a2443930fe15fa41ab8c39a6
- SHA1 ceddbae43aeb10d7b028c817cc84efd80cbd9686
- SHA512 1a74f3816c6e55b6af260bc26d86a9b5b2edbe12f8802e5e62309b5a257d3b4dd26fbcd2b504f5ba8cf08bdea8491a948e8b4a8c261ac6ddf182ca01545bb8d0
- SSDEEP 6144:NfXeDpVSbBczu+e31NVOTV2XlrPETP3BHIQKTrHS:hO2czu+e31NVOTV2XlrPETP3BHIQKTr
- TLSH T15324579D766072DFC857D472DEA82CA8EA5074BB931F4203A02715EDEA4D897DF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
VoiceBoost.exe
Resource
win10ltsc2021-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
VoiceBoost.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
VoiceBoost.exe
Resource
win11-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target VoiceBoost.exe
- Size 204KB
- SHA256 c41a423557cab5da2c3b637f708437af49b97c757d97d795cfeb1232bee95cbd
- MD5 a8e73de3a2443930fe15fa41ab8c39a6
- SHA1 ceddbae43aeb10d7b028c817cc84efd80cbd9686
- SHA512 1a74f3816c6e55b6af260bc26d86a9b5b2edbe12f8802e5e62309b5a257d3b4dd26fbcd2b504f5ba8cf08bdea8491a948e8b4a8c261ac6ddf182ca01545bb8d0
- SSDEEP 6144:NfXeDpVSbBczu+e31NVOTV2XlrPETP3BHIQKTrHS:hO2czu+e31NVOTV2XlrPETP3BHIQKTr
- TLSH T15324579D766072DFC857D472DEA82CA8EA5074BB931F4203A02715EDEA4D897DF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.