Analysis
- max time kernel
165s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 16:13
General
- Target BoosterX.exe
- Size 33.8MB
- Sample260804-tpblfasshw
- SHA256 457650023111ecaa72ed5ac809d6b1204518f4591e3d81e62a732334026261b1
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Modifies system certificate store 2 TTPs 3 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BoosterX.exe"C:\Users\Admin\AppData\Local\Temp\BoosterX.exe"1⤵
- Loads dropped DLL
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
libskiasharp.dll
memory/2772-22-0x0000018755A30000-0x0000018755A38000-memory.dmp
memory/2772-16-0x0000018737000000-0x0000018737020000-memory.dmp
memory/2772-3-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-4-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-5-0x0000018751290000-0x0000018751BC6000-memory.dmp
memory/2772-7-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-8-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-1-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-11-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-12-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-13-0x0000018751BD0000-0x000001875406C000-memory.dmp
memory/2772-15-0x0000018736FD0000-0x0000018736FE0000-memory.dmp
memory/2772-14-0x0000018736F70000-0x0000018736F78000-memory.dmp
memory/2772-17-0x0000018754A70000-0x0000018754A9E000-memory.dmp
memory/2772-0-0x00007FFD7EA0F000-0x00007FFD7EA10000-memory.dmp
memory/2772-19-0x0000018751270000-0x000001875127C000-memory.dmp
memory/2772-18-0x0000018737030000-0x0000018737038000-memory.dmp
memory/2772-20-0x00000187558C0000-0x00000187558FE000-memory.dmp
memory/2772-2-0x0000018734900000-0x0000018736AD8000-memory.dmp
memory/2772-21-0x0000018755900000-0x00000187559B8000-memory.dmp
memory/2772-29-0x0000018755AD0000-0x0000018755ADA000-memory.dmp
memory/2772-25-0x0000018755A90000-0x0000018755A98000-memory.dmp
memory/2772-24-0x0000018755A80000-0x0000018755A88000-memory.dmp
memory/2772-26-0x0000018755A20000-0x0000018755A34000-memory.dmp
memory/2772-27-0x0000018755BD0000-0x0000018755BF6000-memory.dmp
memory/2772-23-0x0000018755AB0000-0x0000018755ACC000-memory.dmp
memory/2772-28-0x0000018755AA0000-0x0000018755AA8000-memory.dmp
memory/2772-31-0x0000018755C40000-0x0000018755C66000-memory.dmp
memory/2772-30-0x0000018755C10000-0x0000018755C24000-memory.dmp
memory/2772-32-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-33-0x0000018758640000-0x0000018758648000-memory.dmp
memory/2772-35-0x0000018759AE0000-0x0000018759AEE000-memory.dmp
memory/2772-34-0x0000018759B10000-0x0000018759B4E000-memory.dmp
memory/2772-36-0x0000018755600000-0x00000187557A6000-memory.dmp
memory/2772-37-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-38-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-39-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-40-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-42-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp
memory/2772-43-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp