General
- Target boykisser.exe
- Size 4.2MB
- Sample260701-k64twaat4k
- SHA256 6cc35b067da5a19dc2cf14bb11c1df7b03aff259e27466508a16f2ef7606e96f
- MD5 c2bcd2dfb109db34a98044dac7151fbf
- SHA1 d1487a36ff4d2a3d41d9f4e5d9244805238b0a01
- SHA512 da89e0664ce5f042c4f404ad63e7643d43bdae68e1782e566c73bf19b03b6e830d0df40e4f74265a500e3e0e4c0663834cca6cb0268ebf9acd90c018bf8d868c
- SSDEEP 98304:CsgKSqdoJYjfARDZt6E5rYcpEksh29fNvBnvfoPMp6G6xqXifpc0Du0d:TAqdaYDARP6E5rYcpEYfjvQUp56AXia
- TLSH T18F1633F9FE985A4CEBF3EEF80999B271C3B421A345742D9F0418FE1C460711A99998E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
boykisser.exe
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
boykisser.exe
Resource
win11ltsc2024-20260630-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target boykisser.exe
- Size 4.2MB
- SHA256 6cc35b067da5a19dc2cf14bb11c1df7b03aff259e27466508a16f2ef7606e96f
- MD5 c2bcd2dfb109db34a98044dac7151fbf
- SHA1 d1487a36ff4d2a3d41d9f4e5d9244805238b0a01
- SHA512 da89e0664ce5f042c4f404ad63e7643d43bdae68e1782e566c73bf19b03b6e830d0df40e4f74265a500e3e0e4c0663834cca6cb0268ebf9acd90c018bf8d868c
- SSDEEP 98304:CsgKSqdoJYjfARDZt6E5rYcpEksh29fNvBnvfoPMp6G6xqXifpc0Du0d:TAqdaYDARP6E5rYcpEYfjvQUp56AXia
- TLSH T18F1633F9FE985A4CEBF3EEF80999B271C3B421A345742D9F0418FE1C460711A99998E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1