General
- Target Rizonememorybooster.zip
- Size 556KB
- Sample260713-afrfrah13p
- SHA256 ce87f7c2082875b01904eb27d7aea95bc90355bcb399193b8cc03dc65450426f
- MD5 c787d19e83addc594a07bec8bf6d546f
- SHA1 1b489d8ed05391a15647519a9ae9df03db2c2bd7
- SHA512 0382aca73e5eb4a64b8c6d026fac1b9102b2ce29081d86dff4c369e574cf576896083ff5c96eda75bf1b89c677a3bcac4e0f98f29bfd7f2c9eaa1313924c6c1e
- SSDEEP 12288:lPXkfDzqM4CzSQlxlwg4cRZBwNv+2wOuHavpmP/seDxwJqMTti:lv2zYCzTflwg4w422nu6v0seaTc
- TLSH T199C423285C492906CE5B69D0B89C736428D87F642BB97425DE3913A104F90AB82F7E7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
memBoost-1-7-9-1798/Readme.rtf
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
memBoost-1-7-9-1798/Readme.rtf
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
memBoost-1-7-9-1798/Support/memBoost.chm
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
memBoost-1-7-9-1798/Support/memBoost.chm
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
memBoost-1-7-9-1798/memBoost.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target memBoost-1-7-9-1798/Readme.rtf
- Size 79KB
- SHA256 80aee4294cccd3190a020c34c252f57a7f771b3626b0847b69cfecc19a0d48d3
- MD5 bec23dec858a041a83a2ce6ab5b9748c
- SHA1 b5a1c4f534bf59947f5fad747bd07c0c4d4dc2bf
- SHA512 ededbb326b0a137bffd487f8953e40d001dda8ab0204ed66e909c46cbd6a92767181ee1b21dbf8546ae98d6777b60e3fc1760fcacc8a2eb08b251b2cb19141fd
- SSDEEP 768:lEcqa3HUzX0TleviG/aV5qpt2LlG6sjyxMaPMc5x3bxbnlXWFiG/aV5qpAuL1KSg:lEpa/kDreB
- TLSH T1098364B805428391D2724784FA5EF0CA6E35F11418E578D472EFC3BAA13FD2EEE54962
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target memBoost-1-7-9-1798/Support/memBoost.chm
- Size 80KB
- SHA256 b399a5dd2b017782a0c161fc097e891e9b7b1ba5cb4a3961e2277eadf842fd8d
- MD5 f39096214060cba8f13b32eac7616800
- SHA1 38768c95d88b42f55b40027e45da60ea72c45aeb
- SHA512 756cc761d8c3fa49313ba7f1248a46a452dce9e209e28b658860eb79d11820f9463171fcc2916adb824d414bad2e875ab4e26bdffeb8d710bbf832fddfca8a4d
- SSDEEP 1536:1fLOk4s01Pc3peCVanemdnAIdOgoSThmQ9+vpw7gK/CCFbB6M:hLN4s01P6petnTFddOzSThH57rPP
- TLSH T126830262D6F82301F94E07F03CEAD969D3B45E224524AEB7381B269C15F59194EF1CB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target memBoost-1-7-9-1798/memBoost.exe
- Size 523KB
- SHA256 7b618135fe7f7140c3c100ef3fdc3c0562746097ebc20e640751d3b7e3561626
- MD5 db2dbaaef2e345640704f7b7880bb89e
- SHA1 090d0dab7e4d59e4bb68f31d5d638cdbc9e82daa
- SHA512 bb2ccbc2cbcf74974db58a8a77f045219335839dd17a53c5504a49659286f3f8d0a78921aadfd3c18545cede32362330554461cca3be03aa241fcc50c0fac365
- SSDEEP 12288:0zcRD02J4Sq2vHGB67KWKKmDXJFDmv+swMoHaLpmP/se6xK:ecRToImoAbrDm2sDo6L0se7
- TLSH T1ACB4125AC6F2BB1AC6255BF02A97B73225BCAE5153264706D2B07C754FFD2C33D86802
- MD5 SHA1 SHA512 SSDEEP TLSH
-
AutoIT Executable
AutoIT scripts compiled to PE executables.