Overview
overview
10Static
static
3BoltChecke...V2.exe
windows7-x64
10BoltChecke...V2.exe
windows10-2004-x64
10BoltChecke...cc.exe
windows7-x64
1BoltChecke...cc.exe
windows10-2004-x64
3BoltChecke...-2.dll
windows7-x64
3BoltChecke...-2.dll
windows10-2004-x64
3BoltChecke...es.exe
windows7-x64
3BoltChecke...es.exe
windows10-2004-x64
3BoltChecke...c1.exe
windows7-x64
1BoltChecke...c1.exe
windows10-2004-x64
3BoltChecke...-3.dll
windows7-x64
3BoltChecke...-3.dll
windows10-2004-x64
3BoltChecke...-3.dll
windows7-x64
3BoltChecke...-3.dll
windows10-2004-x64
3BoltChecke...-2.dll
windows7-x64
3BoltChecke...-2.dll
windows10-2004-x64
3BoltChecke...10.dll
windows7-x64
3BoltChecke...10.dll
windows10-2004-x64
3BoltChecke...-2.dll
windows7-x64
3BoltChecke...-2.dll
windows10-2004-x64
3BoltChecke...-1.dll
windows7-x64
3BoltChecke...-1.dll
windows10-2004-x64
3BoltChecke...tml.js
windows7-x64
3BoltChecke...tml.js
windows10-2004-x64
3BoltChecke...heck.o
ubuntu-20.04-amd64
BoltChecke...-dll.o
ubuntu-24.04-amd64
BoltChecke...-exe.o
ubuntu-22.04-amd64
BoltChecke...-log.o
ubuntu-22.04-amd64
BoltChecke...cc.dll
windows7-x64
1BoltChecke...cc.dll
windows10-2004-x64
1BoltChecke...cc.exe
windows7-x64
1BoltChecke...cc.exe
windows10-2004-x64
1Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2024 16:57
Static task
static1
Behavioral task
behavioral1
Sample
BoltChecker(Forntite Checker)/BoltCheckerV2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
BoltChecker(Forntite Checker)/BoltCheckerV2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/bin/gcc.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/bin/gcc.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/bin/libiconv-2.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/bin/libiconv-2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/bin/windres.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/bin/windres.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/cc1.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/cc1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libcloog-isl-3.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libcloog-isl-3.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libgmp-3.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libgmp-3.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libiconv-2.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libiconv-2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libisl-10.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libisl-10.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libmpc-2.dll
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libmpc-2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libmpfr-1.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libmpfr-1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/include/winapi/mshtml.js
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/include/winapi/mshtml.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/lib/bcheck.o
Resource
ubuntu2004-amd64-20241127-en
Behavioral task
behavioral26
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/lib/bt-dll.o
Resource
ubuntu2404-amd64-20240523-en
Behavioral task
behavioral27
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/lib/bt-exe.o
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral28
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/lib/bt-log.o
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral29
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/libtcc.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/libtcc.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/tcc.exe
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
BoltChecker(Forntite Checker)/Compilers/tinycc/tcc.exe
Resource
win10v2004-20241007-en
General
-
Target
BoltChecker(Forntite Checker)/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/cc1.exe
-
Size
12.5MB
-
MD5
72d8fe1f322d4eadbe4b825d0fbba8e3
-
SHA1
14111de0cf33c5608e2d800e96f0bdb8132b7105
-
SHA256
6ce68e248fb64e366aaa6a5fe34fbf530299337de34f03d51dac6b59c86b9a0d
-
SHA512
5f0e73be9ad6f5661b8a9a276966122c96453f73cf6f2dbbf10ac31eee8888c20217ac0b608f69e8302029352e620036804ee8733a5e5e62a104adad9245ffcb
-
SSDEEP
196608:hRehstjis1CX02vdiyLHA/wT47rMR7v37nnds8hWRJsjoPP/HcSOYJfwskFueKy6:BNizBLT3rn8ozo5NZ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cc1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\BoltChecker(Forntite Checker)\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe"C:\Users\Admin\AppData\Local\Temp\BoltChecker(Forntite Checker)\Compilers\MinGW64\libexec\gcc\x86_64-w64-mingw32\4.9.2\cc1.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3296