Overview

overview

10

Static

static

1

Bootstrapper.exe

windows7-x64

10

Bootstrapper.exe

windows10-2004-x64

10

$TEMP/Grass

windows7-x64

1

$TEMP/Grass

windows10-2004-x64

1

$TEMP/Rape

windows7-x64

1

$TEMP/Rape

windows10-2004-x64

1

$TEMP/Soldier

windows7-x64

1

$TEMP/Soldier

windows10-2004-x64

1

EngagingEntities/Blue

windows7-x64

1

EngagingEntities/Blue

windows10-2004-x64

1

EngagingEn...donald

windows7-x64

1

EngagingEn...donald

windows10-2004-x64

1

PotatoBlonde/Achieve

windows7-x64

1

PotatoBlonde/Achieve

windows10-2004-x64

1

PushUpdate/All

windows7-x64

1

PushUpdate/All

windows10-2004-x64

1

PushUpdate...tt.cab

windows7-x64

1

PushUpdate...tt.cab

windows10-2004-x64

1

Bare

windows7-x64

1

Bare

windows10-2004-x64

1

Collaboration

windows7-x64

1

Collaboration

windows10-2004-x64

1

Costumes

windows7-x64

1

Costumes

windows10-2004-x64

1

Happens

windows7-x64

1

Happens

windows10-2004-x64

1

Hull

windows7-x64

1

Hull

windows10-2004-x64

1

Months

windows7-x64

1

Months

windows10-2004-x64

1

Particles

windows7-x64

1

Particles

windows10-2004-x64

1

Analysis

  • max time kernel
    97s
  • max time network
    142s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/01/2025, 17:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/Soldier

  • Size

    30KB

  • MD5

    9b93917559bc9b0c222e0786dafbf76f

  • SHA1

    2b3f3278e3444988c2332a4af4d2ddb9991aee5e

  • SHA256

    d0e7e1b0847f8ecbedfa44d1536b1499e5c80df10c3c83e216c0475445e34572

  • SHA512

    e7b3fbf3103ce0e0440f85b6fc90e3f8c14a71cc4b20357c91c1fde5d9197005a9235ed1bf51a1f2d72f594d6d4594e3e859b25a650012de9c66ee6f15ceae7c

  • SSDEEP

    768:GffFogjRbUd9AkaYTdiVLH7OphoV6Zs4G1Dx/CjEVy43mKWbxyDWlUumh0Z:Y9tbUd9AumSLoShG1DwEVy44bllVma

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\$TEMP\Soldier
    1⤵
      PID:1068

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads