58f4f387a6a5b9a3befdb5607c669e3169edef5408a81fd1dddb38596f3544ba

Analysis

max time kernel
1561s
max time network
1563s
platform
windows7_x64
resource
win7-20240903-it
resource tags

arch:x64arch:x86image:win7-20240903-itlocale:it-itos:windows7-x64systemwindows
submitted
06-10-2024 00:01

Target

Bootstrapper.v19.exe
Size

12.0MB
MD5

624cecbd5312f45f6f9ad90e8cda5762
SHA1

fb141ac8f4e4a071ea97876e6225f9dd1ae8e96c
SHA256

58f4f387a6a5b9a3befdb5607c669e3169edef5408a81fd1dddb38596f3544ba
SHA512

a97a471b09aa8834ca657f5f88ce2e6bec6aae28ed8b4e5e6460582a647ba82efa6a1edc94bb80c9206bf95258cad57b21829afa7f386834759c08642821c2d2
SSDEEP

98304:8iSi8x9XQskurErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EJKhOC1124:8lP9VkurErvI9pWjgfPvzm6gsFEg4A3

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
2172	Bootstrapper.v19.exe

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00050000000194f2-21.dat	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1640 wrote to memory of 2172	1640	Bootstrapper.v19.exe	30
PID 1640 wrote to memory of 2172	1640	Bootstrapper.v19.exe	30
PID 1640 wrote to memory of 2172	1640	Bootstrapper.v19.exe	30

C:\Users\Admin\AppData\Local\Temp\Bootstrapper.v19.exe
"C:\Users\Admin\AppData\Local\Temp\Bootstrapper.v19.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1640
- C:\Users\Admin\AppData\Local\Temp\Bootstrapper.v19.exe
  "C:\Users\Admin\AppData\Local\Temp\Bootstrapper.v19.exe"
  2⤵
  - Loads dropped DLL
  PID:2172

C:\Users\Admin\AppData\Local\Temp\_MEI16402\python311.dll

Filesize
1.6MB

MD5
ccdbd8027f165575a66245f8e9d140de

SHA1
d91786422ce1f1ad35c528d1c4cd28b753a81550

SHA256
503cd34daed4f6d320731b368bbd940dbac1ff7003321a47d81d81d199cca971

SHA512
870b54e4468db682b669887aeef1ffe496f3f69b219bda2405ac502d2dcd67b6542db6190ea6774abf1db5a7db429ce8f6d2fc5e88363569f15cf4df78da2311

Download Submit
memory/2172-23-0x000007FEF5A20000-0x000007FEF6012000-memory.dmp

Filesize
5.9MB

Download