Overview
overview
3Static
static
1Tiktok-Boo....3.zip
windows10-2004-x64
3Tiktok-Boo...ha.png
windows10-2004-x64
1Tiktok-Boo...ub.zip
windows10-2004-x64
1img/materi...gn.svg
windows10-2004-x64
3img/photon.svg
windows10-2004-x64
3img/ublock-defs.svg
windows10-2004-x64
3img/ublock.svg
windows10-2004-x64
3is-webrtc-...d.html
windows10-2004-x64
3js/1p-filters.js
windows10-2004-x64
3js/3p-filters.js
windows10-2004-x64
3js/about.js
windows10-2004-x64
3js/advance...ngs.js
windows10-2004-x64
3js/asset-viewer.js
windows10-2004-x64
3Tiktok-Boo...ICENSE
windows10-2004-x64
3Tiktok-Boo...ler.py
windows10-2004-x64
3Tiktok-Boo...ion.py
windows10-2004-x64
3Tiktok-Boo...age.py
windows10-2004-x64
3Tiktok-Boo...nfo.py
windows10-2004-x64
3Tiktok-Boo...DME.md
windows10-2004-x64
3Tiktok-Boo...e1.png
windows10-2004-x64
1Tiktok-Boo...e2.png
windows10-2004-x64
1Tiktok-Boo...e3.png
windows10-2004-x64
1Tiktok-Boo...e4.png
windows10-2004-x64
1Tiktok-Boo...nfo.py
windows10-2004-x64
3Tiktok-Boo...tic.py
windows10-2004-x64
3Tiktok-Boo...ERSION
windows10-2004-x64
3Tiktok-Boo...ig.cfg
windows10-2004-x64
3Tiktok-Boo...s.json
windows10-2004-x64
3Tiktok-Boo...ain.py
windows10-2004-x64
3Tiktok-Boo...ts.txt
windows10-2004-x64
1Tiktok-Boo...un.bat
windows10-2004-x64
3Tiktok-Boo...log.md
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/08/2026, 22:10
Static task
static1
Behavioral task
behavioral1
Sample
Tiktok-Booster-2.14.3.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Tiktok-Booster-2.14.3/Captcha/captcha.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Tiktok-Booster-2.14.3/Extensions/ub.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
img/material-design.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
img/photon.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
img/ublock-defs.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
img/ublock.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
is-webrtc-supported.html
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
js/1p-filters.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
js/3p-filters.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
js/about.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
js/advanced-settings.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
js/asset-viewer.js
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Tiktok-Booster-2.14.3/LICENSE
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Tiktok-Booster-2.14.3/Modules/BannersHandler.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Tiktok-Booster-2.14.3/Modules/Session.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Tiktok-Booster-2.14.3/Modules/Usage.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Tiktok-Booster-2.14.3/Modules/VideoInfo.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Tiktok-Booster-2.14.3/README.md
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
Tiktok-Booster-2.14.3/SHOWCASE/showcase1.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Tiktok-Booster-2.14.3/SHOWCASE/showcase2.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
Tiktok-Booster-2.14.3/SHOWCASE/showcase3.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Tiktok-Booster-2.14.3/SHOWCASE/showcase4.png
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
Tiktok-Booster-2.14.3/Static/InitialInfo.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Tiktok-Booster-2.14.3/Static/Static.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
Tiktok-Booster-2.14.3/VERSION
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Tiktok-Booster-2.14.3/config.cfg
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
Tiktok-Booster-2.14.3/languages.json
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Tiktok-Booster-2.14.3/main.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
Tiktok-Booster-2.14.3/requirements.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Tiktok-Booster-2.14.3/run.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
Tiktok-Booster-2.14.3/versionslog.md
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target Tiktok-Booster-2.14.3/Captcha/captcha.png
- Size 13KB
- Sample260807-13c5ravbmd
- SHA256 b710e724518c776ee106644f22f7d0b11283e80ac71e0c5b0bfb9eda77670680
- MD5 746e4f08ead6eac5f1ec3259ca25a1e0
- SHA1 eb76e15ae89d7df6b6ba629e093910807d1fa209
- SHA512 069733c388600054d3984134d8408cae57d5e7fc913b125475a36eb75537313a10a52ed791360585ec3ed55a10d21323b4e4e2911c8b89e8ec5a3ee2e89f0fbb
- SSDEEP 384:b93gWaRq54omvr4IGedzc9VAf3hstFJ5SiRkknTcw:5JaUaoFfeddJabSiWUIw
- TLSH T1CC52C07494722B4C82C14B1BCCE7C68E9C5E6D45C6D6A8A05F23E27B01EBA5F5178D43
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1472 mspaint.exe 1472 mspaint.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1472 mspaint.exe 1472 mspaint.exe 1472 mspaint.exe 1472 mspaint.exe
Processes
-
C:\Windows\system32\mspaint.exe"C:\Windows\system32\mspaint.exe" "C:\Users\Admin\AppData\Local\Temp\Tiktok-Booster-2.14.3\Captcha\captcha.png"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1472
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:1576