Analysis
-
max time kernel
61s -
max time network
62s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
01/09/2024, 13:00
General
-
Target
Bootstrapper.exe
-
Size
541KB
-
MD5
c866a97e863191ef2dad7ece99d2f6dc
-
SHA1
bb21aefcae38dca8685c23e85657764fcac763a3
-
SHA256
5e0be0fcfa46fd659003fe6b4003657a9f2fc057065ef8fe60dcbcc5c0e90db6
-
SHA512
57d9d67d1029443c9306f753b59d058e436814b2f41066822b5b1ff13a3c33e0eb0ef34225ea41d3692f274ca03718e043955813e0e147f354878badc377298b
-
SSDEEP
6144:XfhPRyaR48W3YU470VkOlVzLLYCKGsZlH/MCJ8BxBcGumbEFcyjjib2:vhpppWIb70VkHCU3E5Bc9LFFjjib
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 10 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe"C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
541KB
MD5c866a97e863191ef2dad7ece99d2f6dc
SHA1bb21aefcae38dca8685c23e85657764fcac763a3
SHA2565e0be0fcfa46fd659003fe6b4003657a9f2fc057065ef8fe60dcbcc5c0e90db6
SHA51257d9d67d1029443c9306f753b59d058e436814b2f41066822b5b1ff13a3c33e0eb0ef34225ea41d3692f274ca03718e043955813e0e147f354878badc377298b
-
Filesize
4KB
-
Filesize
568KB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB