General
- Target Boost Bot V2.0.8.exe
- Size 39.7MB
- Sample260718-mbbkysf12m
- SHA256 3d4c836ceafe172af83019ad988803819ffd31f5fdc7e33738a0ea86f39ba43a
- MD5 fd73170c84293bfed55b7cb685d49331
- SHA1 bedd5b3e4b89c50fbf1f2f24cadbbbc166e1af8b
- SHA512 00aa3ac8f02710c24c474a3641e4fe044aff6384cc6a6aa6970cd3c4f28218801c98153457313fd6d59aaa95d0c8b50b54351348332aa810f642c1f7ca62d07f
- SSDEEP 786432:+bmSYmDvJmN2dZtBGu+/sCchZJjxagLqmNr1OcFAaZA5TVn9saRDMEi:zlmRZSuQXcdDLlNBOcWrTN9sZE
- TLSH T18797335B1FFD3865C1B3957078FE0AC8D199AC81A75701EF8A7D38480E366F89123B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Boost Bot V2.0.8.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
Boost Bot V2.0.8.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Boost Bot V2.0.8.exe
- Size 39.7MB
- SHA256 3d4c836ceafe172af83019ad988803819ffd31f5fdc7e33738a0ea86f39ba43a
- MD5 fd73170c84293bfed55b7cb685d49331
- SHA1 bedd5b3e4b89c50fbf1f2f24cadbbbc166e1af8b
- SHA512 00aa3ac8f02710c24c474a3641e4fe044aff6384cc6a6aa6970cd3c4f28218801c98153457313fd6d59aaa95d0c8b50b54351348332aa810f642c1f7ca62d07f
- SSDEEP 786432:+bmSYmDvJmN2dZtBGu+/sCchZJjxagLqmNr1OcFAaZA5TVn9saRDMEi:zlmRZSuQXcdDLlNBOcWrTN9sZE
- TLSH T18797335B1FFD3865C1B3957078FE0AC8D199AC81A75701EF8A7D38480E366F89123B66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger