General

  • Target
    Rizonememorybooster.zip
  • Size 556KB
  • Sample260713-afrfrah13p
  • SHA256 ce87f7c2082875b01904eb27d7aea95bc90355bcb399193b8cc03dc65450426f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Rizonememorybooster.zip
    .zip 556KB
  • memBoost-1-7-9-1798/Readme.rtf
    .rtf 79KB
  • memBoost-1-7-9-1798/Support/memBoost.chm
    .chm 80KB
  • memBoost-1-7-9-1798/memBoost.exe
    .exe 523KB
  • out.upx
    .exe 757KB
  • memBoost-1-7-9-1798/memBoostl.ini
    195B

Rizonememorybooster.zip

  • SHA256 ce87f7c2082875b01904eb27d7aea95bc90355bcb399193b8cc03dc65450426f
  • MD5 SHA1 SHA512 SSDEEP TLSH