General
- Target Boost Bot.exe
- Size 13.6MB
- Sample260824-gkytystbma
- SHA256 4b0ca3b244656f4ec0e3c5d8c98ecdc37833339a2d5ce5b3ea2967e1d9b93392
- MD5 173e0d1f54e3ddf6c94768e75af97fe5
- SHA1 f8fb01c308db4c88ff86eaeb3f3f3feaae9a0d52
- SHA512 41513cbc696d950dcf10e076354f4be6a96b1c941967354af2aa6526c9d52949292c653921ef639e30e55cf5cccab2085f9bcaa252ce511194cd1daf00656685
- SSDEEP 196608:h46qrRpBPRotCnynR0nGS53Mt7V2RrAqPCZ1PPpuUt5EuPe:hKrWCnQ0mKrAqPCZ1PRlquP
- TLSH T19FE6DFE720E12E89C84DE537C202FD7E8A9FB47E4C2DA6A3F449D225EA93C417547E05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Boost Bot.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Boost Bot.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Boost Bot.exe
- Size 13.6MB
- SHA256 4b0ca3b244656f4ec0e3c5d8c98ecdc37833339a2d5ce5b3ea2967e1d9b93392
- MD5 173e0d1f54e3ddf6c94768e75af97fe5
- SHA1 f8fb01c308db4c88ff86eaeb3f3f3feaae9a0d52
- SHA512 41513cbc696d950dcf10e076354f4be6a96b1c941967354af2aa6526c9d52949292c653921ef639e30e55cf5cccab2085f9bcaa252ce511194cd1daf00656685
- SSDEEP 196608:h46qrRpBPRotCnynR0nGS53Mt7V2RrAqPCZ1PPpuUt5EuPe:hKrWCnQ0mKrAqPCZ1PRlquP
- TLSH T19FE6DFE720E12E89C84DE537C202FD7E8A9FB47E4C2DA6A3F449D225EA93C417547E05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger