Overview

overview

7

Static

static

3

SpaceBootstrapper.exe

windows7-x64

7

SpaceBootstrapper.exe

windows10-2004-x64

7

space_keysys.pyc

windows7-x64

3

space_keysys.pyc

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/06/2024, 18:43

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SpaceBootstrapper.exe
  • Size 8.1MB
  • Sample240616-xc49rssdqf
  • SHA256 563c5f0ef4b8403e4a933931ee762b428fe1d6b229d452a1d5397f050393f4b5
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 15 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SpaceBootstrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\SpaceBootstrapper.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2476
    • C:\Users\Admin\AppData\Local\Temp\SpaceBootstrapper.exe
      "C:\Users\Admin\AppData\Local\Temp\SpaceBootstrapper.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of WriteProcessMemory
      PID:3724
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c title space - key sys (beta ver.)
        3⤵
          PID:2256

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\VCRUNTIME140.dll
          • Size 116KB
          • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _bz2.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\_bz2.pyd
          • Size 82KB
          • SHA256 bd8621fcc901fa1de3961d93184f61ea71068c436794af2a4449738ccf949946
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _decimal.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\_decimal.pyd
          • Size 247KB
          • SHA256 d4ae192bbd4627fc9487a2c1cd9869d1b461c20cfd338194e87f5cf882bbed12
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _hashlib.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\_hashlib.pyd
          • Size 64KB
          • SHA256 6c50c9801a5caf0bb52b384f9a0d5a4aa182ca835f293a39e8999cf6edf2f087
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _lzma.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\_lzma.pyd
          • Size 155KB
          • SHA256 22d10e2d6ad3e3ed3c49eb79ab69a81aaa9d16aeca7f948da2fe80877f106c16
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _queue.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\_queue.pyd
          • Size 31KB
          • SHA256 d43dca0e00c3c11329b68177e967cf5240495c4786f5afa76ac4f267c3a5cdb9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _socket.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\_socket.pyd
          • Size 81KB
          • SHA256 24017d664af20ee3b89514539345caac83eca34825fcf066a23e8a4c99f73e6d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          _ssl.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\_ssl.pyd
          • Size 173KB
          • SHA256 2b6f1b1ac47cb7878b62e8d6bb587052f86ca8145b05a261e855305b9ca3d36c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          base_library.zip
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\base_library.zip
          • Size 1.3MB
          • SHA256 eeb7f0b3e56b03454868411d5f62f23c1832c27270cee551b9ca7d9d10106b29
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          cacert.pem
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\certifi\cacert.pem
          • Size 283KB
          • SHA256 cf9d37fa81407afe11dcc0d70fe602561422aa2344708c324e4504db8c6c5748
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          md.cp312-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\charset_normalizer\md.cp312-win_amd64.pyd
          • Size 10KB
          • SHA256 ecf12e2c0a00c0ed4e2343ea956d78eed55e5a36ba49773633b2dfe7b04335c0
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          md__mypyc.cp312-win_amd64.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\charset_normalizer\md__mypyc.cp312-win_amd64.pyd
          • Size 120KB
          • SHA256 4107b1d6f11d842074a9f21323290bbe97e8eed4aa778fbc348ee09cc4fa4637
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libcrypto-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\libcrypto-3.dll
          • Size 4.9MB
          • SHA256 2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libssl-3.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\libssl-3.dll
          • Size 771KB
          • SHA256 41ad1a04ca27a7959579e87fbbda87c93099616a64a0e66260c983381c5570d1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          python312.dll
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\python312.dll
          • Size 6.7MB
          • SHA256 0cc4e557972488eb99ea4aeb3d29f3ade974ef3bcd47c211911489a189a0b6f2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          select.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\select.pyd
          • Size 29KB
          • SHA256 74cca85600e7c17ea6532b54842e26d3cae9181287cdf5a4a3c50af4dab785e5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          unicodedata.pyd
          • Path C:\Users\Admin\AppData\Local\Temp\_MEI24762\unicodedata.pyd
          • Size 1.1MB
          • SHA256 2a50d629895a05b10a262acf333e7a4a31db5cb035b70d14d1a4be1c3e27d309
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download