Analysis
-
max time kernel
837s -
max time network
838s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
26-12-2024 14:22
General
-
Target
sigma/BootstrapperV2.05.exe
-
Size
2.8MB
-
MD5
241706a4b2aa26c47eb1dbadf12eba14
-
SHA1
e46f254c6c29bf9371f04b7a27fb1569a7dbba23
-
SHA256
11b86e51f1f67bc7d59a881aa9cbbb5519c118ea74291476ff61fb9ddbff454e
-
SHA512
2e876573e2f44491bfe0cc915910f66d030c5e013f36d72e460603480f292bf6f4c5625cebeba47a9ea4fc564e776c656f74c5d7032ea0340de3840db8fe49ea
-
SSDEEP
49152:klcyXfHnaBTof9ePCDkIAm13E6ClY11kqXfd+/9AB1Y3ha/ehH7pNLLYf:eZXfHaFoyIv2blY11kqXf0FZ3ha/e97j
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\sigma\BootstrapperV2.05.exe"C:\Users\Admin\AppData\Local\Temp\sigma\BootstrapperV2.05.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.9MB
-
Filesize
9.9MB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
9.9MB
-
Filesize
32KB
-
Filesize
160KB
-
Filesize
40KB
-
Filesize
1024KB
-
Filesize
40KB
-
Filesize
88KB
-
Filesize
40KB
-
Filesize
32KB
-
Filesize
120KB
-
Filesize
712KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
40KB
-
Filesize
9.9MB
-
Filesize
9.9MB
-
Filesize
9.9MB