Overview
overview
6Static
static
3Bolt AIO C...G].exe
windows7-x64
6Bolt AIO C...G].exe
windows10-2004-x64
6Bolt AIO C...52.dll
windows7-x64
1Bolt AIO C...52.dll
windows10-2004-x64
1Bolt AIO C...ds.dll
windows7-x64
1Bolt AIO C...ds.dll
windows10-2004-x64
1Bolt AIO C...re.dll
windows7-x64
1Bolt AIO C...re.dll
windows10-2004-x64
1Bolt AIO C...st.dll
windows7-x64
1Bolt AIO C...st.dll
windows10-2004-x64
1Bolt AIO C...et.dll
windows7-x64
1Bolt AIO C...et.dll
windows10-2004-x64
1Bolt AIO C...ok.dll
windows7-x64
1Bolt AIO C...ok.dll
windows10-2004-x64
1Bolt AIO C...PC.dll
windows7-x64
1Bolt AIO C...PC.dll
windows10-2004-x64
1Bolt AIO C...PC.dll
windows7-x64
1Bolt AIO C...PC.dll
windows10-2004-x64
1Bolt AIO C...UI.dll
windows7-x64
1Bolt AIO C...UI.dll
windows10-2004-x64
1Bolt AIO C...UI.dll
windows7-x64
1Bolt AIO C...UI.dll
windows10-2004-x64
1Bolt AIO C...et.dll
windows7-x64
1Bolt AIO C...et.dll
windows10-2004-x64
1Bolt AIO C...es.dll
windows7-x64
1Bolt AIO C...es.dll
windows10-2004-x64
1Bolt AIO C...on.dll
windows7-x64
1Bolt AIO C...on.dll
windows10-2004-x64
1Bolt AIO C...UI.dll
windows7-x64
1Bolt AIO C...UI.dll
windows10-2004-x64
1Bolt AIO C...ne.dll
windows7-x64
1Bolt AIO C...ne.dll
windows10-2004-x64
1Analysis
-
max time kernel
153s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23/02/2024, 10:31
Static task
static1
Behavioral task
behavioral1
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bolt AIO CRACKED BY [TZCRACKING].exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bolt AIO CRACKED BY [TZCRACKING].exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bunifu_UI_v1.52.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bunifu_UI_v1.52.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Commands.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Commands.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Core.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Core.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Rest.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Rest.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.WebSocket.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.WebSocket.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Webhook.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Webhook.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordRPC.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordRPC.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordWebRPC.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordWebRPC.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral19
Sample
Bolt AIO CRACKED BY [TZCRACKING]/FlatUI.dll
Resource
win7-20240220-en
Behavioral task
behavioral20
Sample
Bolt AIO CRACKED BY [TZCRACKING]/FlatUI.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral21
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Guna.UI.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Guna.UI.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral23
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Leaf.xNet.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Leaf.xNet.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral25
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral27
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Newtonsoft.Json.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Newtonsoft.Json.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral29
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Siticone.UI.dll
Resource
win7-20240215-en
Behavioral task
behavioral30
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Siticone.UI.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral31
Sample
Bolt AIO CRACKED BY [TZCRACKING]/SuperSocket.ClientEngine.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
Bolt AIO CRACKED BY [TZCRACKING]/SuperSocket.ClientEngine.dll
Resource
win10v2004-20240221-en
General
-
Target
Bolt AIO CRACKED BY [TZCRACKING]/Bolt AIO CRACKED BY [TZCRACKING].exe
-
Size
922KB
-
MD5
727188832e9d77e87ebd1aaa12105638
-
SHA1
0a547ad642b712ab92a189acc776d3758ba163bb
-
SHA256
567b8af881787af693a08f8c0849d104ea1427e65c5275e554346a40c44bb219
-
SHA512
5cf2ff673614718723f15d7201c6292fe8be0d24cdd9b2bd210c8155049b2e3045ae4e05be9f09deeafb04d3d4e690696750413576cd675a33d2a85484d36dd8
-
SSDEEP
24576:GF4fE2pLTyWeFtPtFt6WxWFTxkt6WxWFTxZ:eYLT2rlrj
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 12 discord.com 13 discord.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4520 Bolt AIO CRACKED BY [TZCRACKING].exe