Overview
overview
3Static
static
3Bolt AIO C...G].exe
windows10-1703-x64
3Bolt AIO C...52.dll
windows10-1703-x64
1Bolt AIO C...ds.dll
windows10-1703-x64
1Bolt AIO C...re.dll
windows10-1703-x64
1Bolt AIO C...st.dll
windows10-1703-x64
1Bolt AIO C...et.dll
windows10-1703-x64
1Bolt AIO C...ok.dll
windows10-1703-x64
1Bolt AIO C...PC.dll
windows10-1703-x64
1Bolt AIO C...PC.dll
windows10-1703-x64
1Bolt AIO C...UI.dll
windows10-1703-x64
1Bolt AIO C...UI.dll
windows10-1703-x64
1Bolt AIO C...et.dll
windows10-1703-x64
1Bolt AIO C...es.dll
windows10-1703-x64
1Bolt AIO C...on.dll
windows10-1703-x64
1Bolt AIO C...UI.dll
windows10-1703-x64
1Bolt AIO C...ne.dll
windows10-1703-x64
1Bolt AIO C...le.dll
windows10-1703-x64
1Bolt AIO C...nc.dll
windows10-1703-x64
1Bolt AIO C...nc.dll
windows10-1703-x64
1Bolt AIO C...fe.dll
windows10-1703-x64
1Bolt AIO C...ns.dll
windows10-1703-x64
1Bolt AIO C...et.dll
windows10-1703-x64
1Bolt AIO C...et.dll
windows10-1703-x64
1Analysis
-
max time kernel
130s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240221-en -
resource tags
arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system -
submitted
23/02/2024, 15:59
Static task
static1
Behavioral task
behavioral1
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bolt AIO CRACKED BY [TZCRACKING].exe
Resource
win10-20240221-en
Behavioral task
behavioral2
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Bunifu_UI_v1.52.dll
Resource
win10-20240214-en
Behavioral task
behavioral3
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Commands.dll
Resource
win10-20240221-en
Behavioral task
behavioral4
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Core.dll
Resource
win10-20240221-en
Behavioral task
behavioral5
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Rest.dll
Resource
win10-20240221-en
Behavioral task
behavioral6
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.WebSocket.dll
Resource
win10-20240221-en
Behavioral task
behavioral7
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Discord.Net.Webhook.dll
Resource
win10-20240221-en
Behavioral task
behavioral8
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordRPC.dll
Resource
win10-20240221-en
Behavioral task
behavioral9
Sample
Bolt AIO CRACKED BY [TZCRACKING]/DiscordWebRPC.dll
Resource
win10-20240221-en
Behavioral task
behavioral10
Sample
Bolt AIO CRACKED BY [TZCRACKING]/FlatUI.dll
Resource
win10-20240221-en
Behavioral task
behavioral11
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Guna.UI.dll
Resource
win10-20240221-en
Behavioral task
behavioral12
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Leaf.xNet.dll
Resource
win10-20240214-en
Behavioral task
behavioral13
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10-20240221-en
Behavioral task
behavioral14
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Newtonsoft.Json.dll
Resource
win10-20240221-en
Behavioral task
behavioral15
Sample
Bolt AIO CRACKED BY [TZCRACKING]/Siticone.UI.dll
Resource
win10-20240221-en
Behavioral task
behavioral16
Sample
Bolt AIO CRACKED BY [TZCRACKING]/SuperSocket.ClientEngine.dll
Resource
win10-20240221-en
Behavioral task
behavioral17
Sample
Bolt AIO CRACKED BY [TZCRACKING]/System.Collections.Immutable.dll
Resource
win10-20240221-en
Behavioral task
behavioral18
Sample
Bolt AIO CRACKED BY [TZCRACKING]/System.Interactive.Async.dll
Resource
win10-20240214-en
Behavioral task
behavioral19
Sample
Bolt AIO CRACKED BY [TZCRACKING]/System.Linq.Async.dll
Resource
win10-20240221-en
Behavioral task
behavioral20
Sample
Bolt AIO CRACKED BY [TZCRACKING]/System.Runtime.CompilerServices.Unsafe.dll
Resource
win10-20240221-en
Behavioral task
behavioral21
Sample
Bolt AIO CRACKED BY [TZCRACKING]/System.Threading.Tasks.Extensions.dll
Resource
win10-20240221-en
Behavioral task
behavioral22
Sample
Bolt AIO CRACKED BY [TZCRACKING]/WebSocket4Net.dll
Resource
win10-20240221-en
Behavioral task
behavioral23
Sample
Bolt AIO CRACKED BY [TZCRACKING]/xNet.dll
Resource
win10-20240221-en
General
-
Target
Bolt AIO CRACKED BY [TZCRACKING]/Bolt AIO CRACKED BY [TZCRACKING].exe
-
Size
922KB
-
MD5
727188832e9d77e87ebd1aaa12105638
-
SHA1
0a547ad642b712ab92a189acc776d3758ba163bb
-
SHA256
567b8af881787af693a08f8c0849d104ea1427e65c5275e554346a40c44bb219
-
SHA512
5cf2ff673614718723f15d7201c6292fe8be0d24cdd9b2bd210c8155049b2e3045ae4e05be9f09deeafb04d3d4e690696750413576cd675a33d2a85484d36dd8
-
SSDEEP
24576:GF4fE2pLTyWeFtPtFt6WxWFTxkt6WxWFTxZ:eYLT2rlrj
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4520 4116 WerFault.exe 73 1064 4116 WerFault.exe 73
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bolt AIO CRACKED BY [TZCRACKING]\Bolt AIO CRACKED BY [TZCRACKING].exe"C:\Users\Admin\AppData\Local\Temp\Bolt AIO CRACKED BY [TZCRACKING]\Bolt AIO CRACKED BY [TZCRACKING].exe"1⤵PID:4116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4116 -s 13642⤵
- Program crash
PID:4520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4116 -s 13642⤵
- Program crash
PID:1064
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4804