Overview
overview
6Static
static
3Bolt AIO C...G].exe
windows7-x64
6Bolt AIO C...G].exe
windows10-2004-x64
6Bolt AIO C...52.dll
windows7-x64
1Bolt AIO C...52.dll
windows10-2004-x64
1Bolt AIO C...ds.dll
windows7-x64
1Bolt AIO C...ds.dll
windows10-2004-x64
1Bolt AIO C...re.dll
windows7-x64
1Bolt AIO C...re.dll
windows10-2004-x64
1Bolt AIO C...st.dll
windows7-x64
1Bolt AIO C...st.dll
windows10-2004-x64
1Bolt AIO C...et.dll
windows7-x64
1Bolt AIO C...et.dll
windows10-2004-x64
1Bolt AIO C...ok.dll
windows7-x64
1Bolt AIO C...ok.dll
windows10-2004-x64
1Bolt AIO C...PC.dll
windows7-x64
1Bolt AIO C...PC.dll
windows10-2004-x64
1Bolt AIO C...PC.dll
windows7-x64
1Bolt AIO C...PC.dll
windows10-2004-x64
1Bolt AIO C...UI.dll
windows7-x64
1Bolt AIO C...UI.dll
windows10-2004-x64
1Bolt AIO C...UI.dll
windows7-x64
1Bolt AIO C...UI.dll
windows10-2004-x64
1Bolt AIO C...et.dll
windows7-x64
1Bolt AIO C...et.dll
windows10-2004-x64
1Bolt AIO C...es.dll
windows7-x64
1Bolt AIO C...es.dll
windows10-2004-x64
1Bolt AIO C...on.dll
windows7-x64
1Bolt AIO C...on.dll
windows10-2004-x64
1Bolt AIO C...UI.dll
windows7-x64
1Bolt AIO C...UI.dll
windows10-2004-x64
1Bolt AIO C...ne.dll
windows7-x64
1Bolt AIO C...ne.dll
windows10-2004-x64
1Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23/02/2024, 10:31 UTC
Static task
static1
Behavioral task
behavioral1
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bolt AIO CRACKED BY [TZCRACKING].exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bolt AIO CRACKED BY [TZCRACKING].exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bunifu_UI_v1.52.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bunifu_UI_v1.52.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Commands.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Commands.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Core.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Core.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Rest.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Rest.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.WebSocket.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.WebSocket.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Webhook.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Webhook.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordRPC.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordRPC.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordWebRPC.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordWebRPC.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral19
Sample
Bolt AIO CRACKED BY [TZCRACKING]/FlatUI.dll
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
Bolt AIO CRACKED BY [TZCRACKING]/FlatUI.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral21
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Guna.UI.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Guna.UI.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral23
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Leaf.xNet.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Leaf.xNet.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral25
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral27
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Newtonsoft.Json.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Newtonsoft.Json.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral29
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Siticone.UI.dll
Resource
win7-20240215-en
Behavioral task
behavioral30
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Siticone.UI.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral31
Sample
Bolt AIO CRACKED BY [TZCRACKING]/SuperSocket.ClientEngine.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Bolt AIO CRACKED BY [TZCRACKING]/SuperSocket.ClientEngine.dll
Resource
win10v2004-20240221-en
General
-
Target
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Rest.dll
-
Size
636KB
-
MD5
7b8c018987190fabd15af4b665482b8d
-
SHA1
dc8c42b5c163fc3f7b32c918f3a62dc2ad9a3afe
-
SHA256
7bc3eee34f122be0270b5befb5f39fa63c26df63ba80f5c3b8c70b8696b68b36
-
SHA512
5c012108e70793696e00d4072ea6b50f9b754b9462c29ac0cd784fdec23fd7588084d0192fe348f6e03f18468831b07d637fff2f422b5256fcb2ccac2a22f80d
-
SSDEEP
6144:yrN7etql5yPXsNTR6qEbd77ax5wyYuOwpyAg4OUQ/F+XIeyChihxYAn9:Il5ylqx4uOP4OU/XH/hihxJ
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request68.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request241.154.82.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request190.178.17.96.in-addr.arpaIN PTRResponse190.178.17.96.in-addr.arpaIN PTRa96-17-178-190deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request41.110.16.96.in-addr.arpaIN PTRResponse41.110.16.96.in-addr.arpaIN PTRa96-16-110-41deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request43.58.199.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request86.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request56.126.166.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request0.205.248.87.in-addr.arpaIN PTRResponse0.205.248.87.in-addr.arpaIN PTRhttps-87-248-205-0lgwllnwnet
-
Remote address:8.8.8.8:53Request31.243.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request11.173.189.20.in-addr.arpaIN PTRResponse
-
71 B 157 B 1 1
DNS Request
68.32.126.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
241.154.82.20.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
190.178.17.96.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
41.110.16.96.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
43.58.199.20.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
86.23.85.13.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
56.126.166.20.in-addr.arpa
-
71 B 116 B 1 1
DNS Request
0.205.248.87.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
31.243.111.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
11.173.189.20.in-addr.arpa