Overview

overview

8

Static

static

3

boiii.exe

windows10-2004-x64

8

boiii.exe

windows10-ltsc_2021-x64

8

boiii.exe

windows11-21h2-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    35s
  • max time network
    34s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    16/05/2026, 07:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    boiii.exe
  • Size 2.5MB
  • Sample260516-jcga2sbw21
  • SHA256 47c8e9eb3935bad9be15944f1b4b77d7e4a82a9a2c692fbb80157fcc902f66e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarespyware

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Loads dropped DLL 2 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 36 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\boiii.exe
    "C:\Users\Admin\AppData\Local\Temp\boiii.exe"
    1⤵
    • Downloads MZ/PE file
    • Loads dropped DLL
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:3288

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        gamesettings_escort.cfg
        • Path C:\Users\Admin\AppData\Local\boiii\data\gamesettings\mp\gamesettings_escort.cfg
        • Size 1KB
        • SHA256 21a4acf60132f6be3d85d87f2e1fd14f38fd9252862ef3becc550e97df264cdd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        bigboiii.jpg
        • Path C:\Users\Admin\AppData\Local\boiii\data\launcher\bigboiii.jpg
        • Size 13KB
        • SHA256 2cdf28e15bfd93b43d4978b80b27297432b7571e2561c3931cc5daa94779d503
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        main.html
        • Path C:\Users\Admin\AppData\Local\boiii\data\launcher\main.html
        • Size 3KB
        • SHA256 ea6e677b58524a55970bc9b234ea19c350bed256823b97ffbc75afb29b19e3cc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        noise.jpg
        • Path C:\Users\Admin\AppData\Local\boiii\data\launcher\noise.jpg
        • Size 57KB
        • SHA256 815a7129c1511dbb247e4fd0bb7643f0b6c21719931527d8ba927f070525503d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dvar_list.txt
        • Path C:\Users\Admin\AppData\Local\boiii\data\lookup_tables\dvar_list.txt
        • Size 172KB
        • SHA256 7bc0d41e020fbaa9e2d2da35dac2677cf87472c3bb67e3387c7b3e159f91d8a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bot.gsc
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\bots\_bot.gsc
        • Size 15KB
        • SHA256 23f8c0754c51c368c974d91622b068eedb7bff229f2249518d7a87121ea64564
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bot.gsc_raw
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\bots\_bot.gsc_raw
        • Size 21KB
        • SHA256 623af61f307add74914fcc525116507e5b10ddc69675896890bec44f873a2696
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bot_loadout.gsc
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\bots\_bot_loadout.gsc
        • Size 15KB
        • SHA256 76ef83ff2328239638923ed1b65016de5b014f6c59483cf9fba267dc06b3b514
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bot_loadout.gsc_raw
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\bots\_bot_loadout.gsc_raw
        • Size 20KB
        • SHA256 5582b883efa664f3929742397be9635ffb12d1cf79be57a6652663263f155c00
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _globallogic_player.gsc
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\gametypes\_globallogic_player.gsc
        • Size 89KB
        • SHA256 6b19041cdebb63f5d69ca29953f56f62658938bf08e0777a199ea9202d4e4837
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _globallogic_player.gsc_raw
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\gametypes\_globallogic_player.gsc_raw
        • Size 140KB
        • SHA256 8767b97f6e7100a3ae53381e002337288582eeef3f9902d264515f4dce63c1b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _serversettings.gsc
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\gametypes\_serversettings.gsc
        • Size 4KB
        • SHA256 45fc01bc95280dd871f0f4753d053ff3e85dfd2aee32a19beb47019992532c17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _serversettings.gsc_raw
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\gametypes\_serversettings.gsc_raw
        • Size 5KB
        • SHA256 4a2cafed18b07aef14dd14ba138313441db6d69f6af2faca399a06258ca86e52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _teams.gsc
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\teams\_teams.gsc
        • Size 12KB
        • SHA256 0480be2a1923429d36e2186e41034e4d8707038c685b5569d8af03645e3c2e94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _teams.gsc_raw
        • Path C:\Users\Admin\AppData\Local\boiii\data\scripts\mp\teams\_teams.gsc_raw
        • Size 14KB
        • SHA256 2c42f840bd3fbf5df5b29590de56ed4793cc0765fb898c2925693f694ac936f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\doubleclick_join_server\__init__.lua
        • Size 3KB
        • SHA256 0ea0065c9a706eb41f219b7014349b938b2318d886b6f0c592376a9bf46d3937
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\frontend_menus\__init__.lua
        • Size 5KB
        • SHA256 7cadf9515688733bdbf360a4071392a3979bd0c91e6f38961668a270f893176b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        datasources_change_map_categories.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\frontend_menus\datasources_change_map_categories.lua
        • Size 3KB
        • SHA256 468320779107c84553062a5151a338f21782e0bafee6d3a0d30f6d7a1e1c65c0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        datasources_gamesettingsflyout_buttons.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\frontend_menus\datasources_gamesettingsflyout_buttons.lua
        • Size 8KB
        • SHA256 66154685ab03d93e02a93705c113ab3eb0d9308e05ad72e02d5d94f5f7e85a94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        datasources_start_menu_tabs.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\frontend_menus\datasources_start_menu_tabs.lua
        • Size 5KB
        • SHA256 e226bf82cb23ef35b83df3e8d8a5a23ad72d4115c43f71a69201985e7006221b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        utils.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\frontend_menus\utils.lua
        • Size 4KB
        • SHA256 0c5d61ce1479cad3c66af8224b9fc65519d0b500282a51f1230fdbb4114753a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\graphics_settings\__init__.lua
        • Size 4KB
        • SHA256 bdbea7688d5f77f44110c8ba57d6a9cdbfa17b166e87f63bda3609cffcfcd1b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\lua_fixes\__init__.lua
        • Size 107B
        • SHA256 d57ce004124671d6ff51cfb3561c5533355057ebb1180be5ffa747d0e393c1db
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\party\__init__.lua
        • Size 910B
        • SHA256 af38eb50df014795977faf1c0d616acce5868a4cae682a448d449e8e0906e6a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        datasources_start_menu_game_options.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\party\datasources_start_menu_game_options.lua
        • Size 4KB
        • SHA256 1c5465ae36cb636ad5c1f559785b904756426f60a9f90f108de9318d88cf2f3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\playlist\__init__.lua
        • Size 973B
        • SHA256 6fc2f1d28bfe5a6239c75a8b2bb6c9dfb392f3e022b0efd23e207564646de8ea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        widget_playlist_category_match_settings_info.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\playlist\widget_playlist_category_match_settings_info.lua
        • Size 421B
        • SHA256 b53b11c3dc1049289a744918b55ef2723e459c7924e8d9317ac63e9bed743cc5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        widget_playlist_match_settings_info.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\playlist\widget_playlist_match_settings_info.lua
        • Size 381B
        • SHA256 5dc525e9439be2fce22ca9dc0c1ac75947d43763f54c67330e3cd2532883f5d3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\ranked\__init__.lua
        • Size 31B
        • SHA256 8516c63a49e69b9d1d358bdcf29df9a2b7935084961c164d7feda77323d7d18f
        • MD5 SHA1 SHA512
        Submit Download

        online_mods_loaded.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\ranked\online_mods_loaded.lua
        • Size 726B
        • SHA256 cbf1a49c9d341bed32045f09e7cb078b24e4600116852d4db9a73d6d092e79be
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        __init__.lua
        • Path C:\Users\Admin\AppData\Local\boiii\data\ui_scripts\server_browser\__init__.lua
        • Size 13KB
        • SHA256 7d9d892efaadee3479ab11430622f95ddaf694c44306b9033b4a22c82104cc6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ext.dll
        • Path C:\Users\Admin\AppData\Local\boiii\ext.dll
        • Size 596KB
        • SHA256 9e442b0e55f32011a9a2ceca31260b18edde487f49c9fc569e1ee0c8d188cd33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download