Analysis
- max time kernel
75s - max time network
72s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 20:06
Static task
static1
Behavioral task
behavioral1
Sample
BoosterX.exe
Resource
win10v2004-20260513-en
3 signatures
60 seconds
Behavioral task
behavioral2
Sample
BoosterX.exe
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
General
- Target BoosterX.exe
- Size 37.8MB
- Sample260820-yvdefaxybw
- SHA256 d21ff11ac4f9077b53a22545a510d302ca371f12bc5ff8dd85c8e7d8198d6dc4
- MD5 78dc6637f0e94499109c20ba7328b481
- SHA1 288bfa5a79b58683bdd175566bc0503d186e1d66
- SHA512 23460e9d9cbc47fa11f0d7b3349f7a46ac4adeccc1cc089ba5ebd484693cb9a0d804839c88071ac92603e0f1038fd5868a3ac24e81196d8b39bd137b64d0cd89
- SSDEEP 786432:izd9ymsz0p4tEGOom1+fdlgxRI6CtejL7GP3PZiLdnUwsTvYmvdM:i746GZmul4dPqHZqUwevpvG
- TLSH T1E8973312AB659B3FC94A8336EA7F00256336C3C57B9A8ACF2A50E1743D437481E7794D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 4212 BoosterX.exe 4212 BoosterX.exe - Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 4212 BoosterX.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4212 BoosterX.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Costura\37F9D0B669DC3608A7CEFB671B865AA3\64\libskiasharp.dll
- Size 6.7MB
- SHA256 b8dce1cbaab17976e3bba7c530abdb18f7b84c00f72fba5e00a5593b196b151c
- MD5 ee7fb09006ce57da37fc69eabfd761d9
- SHA1 1665423e6079ae4b2017c60d3ff23786b8eb9891
- SHA512 16f3a16348df5d03b2e0309bca86470316cf62b3465ee738e90623fb9ca09f76184e177bc264a6e4076812447a02065f275da37132f24843a386014a494067f8
- SSDEEP 98304:r1O/k6V4MLi5nDtNLGStmis1jPznt06FjY9ln:086qMLi5nDtNLGStmiwvn66N+l
- TLSH T125669E5771B900E8D1BAD078DA579507FBB1384903B48AEF12A149DA2F27BF079BB311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Costura\37F9D0B669DC3608A7CEFB671B865AA3\64\wfpx.dll
- Size 12KB
- SHA256 4068c5f98c69656fbfa5fe5f490f69afcc9e2244f63bf0cce688d404b3ebaab8
- MD5 86f8b49bedda21b9db2294593c6f8174
- SHA1 bdfc8997e03ca9a8cc4526f27d92d7ae2bdef475
- SHA512 fdbf31f2c186bdd0c99edc7c4765afddf30d98a9edcaf7f7a6ca62f7bbb90cc29b497177af31af18d334b8ba790fc4558ea7a87fd4fc8ad5409f95dd2f5a6bed
- SSDEEP 96:scbubosza/sbQZcSaHvs1IucLyJZNl0Z+IjH2tnl1yGtdVvsnj14LSgYdR56HBo4:s2kWca1t+sIH2tn1dGndgYABocZi
- TLSH T1D1423C86FA9548B4D16A05B4C8331F5AF6F5BA102B125B8F5370A10F2E72712F26F7C9
- MD5 SHA1 SHA512 SSDEEP TLSH