Overview
overview
10Static
static
3Bolt-Check....5.zip
windows10-2004-x64
1Bolt-Checker.exe
windows10-2004-x64
10config\config.yml
windows10-2004-x64
3drivefsext.exe
windows10-2004-x64
3lib.exe
windows10-2004-x64
7boltchecker.pyc
windows10-2004-x64
3libexec.exe
windows10-2004-x64
3skins_database.txt
windows10-2004-x64
1version.txt
windows10-2004-x64
1Analysis
-
max time kernel
426s -
max time network
428s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
31-01-2025 18:12
Behavioral task
behavioral1
Sample
Bolt-Checker-v1.3.5.zip
Resource
win10v2004-20250129-en
Behavioral task
behavioral2
Sample
Bolt-Checker.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
config\config.yml
Resource
win10v2004-20250129-en
Behavioral task
behavioral4
Sample
drivefsext.exe
Resource
win10v2004-20250129-en
Behavioral task
behavioral5
Sample
lib.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
boltchecker.pyc
Resource
win10v2004-20250129-en
Behavioral task
behavioral7
Sample
libexec.exe
Resource
win10v2004-20250129-en
Behavioral task
behavioral8
Sample
skins_database.txt
Resource
win10v2004-20250129-en
Behavioral task
behavioral9
Sample
version.txt
Resource
win10v2004-20250129-en
General
-
Target
skins_database.txt
-
Size
90KB
-
MD5
ccd3dae8529bdbbcea13a17fd37bdfcb
-
SHA1
9c011fef7b64b78e8b37aa929d77499e7a5b06e0
-
SHA256
c799a2ccba79e0bb47dd140933078a0122087ad4fc52464eea3f775e943bcbe9
-
SHA512
16ff1ea4fda2d8f4feb03f35af8aecf2451778e0128d560e0fbf27d35722f86e7510ad9976b36d31b751dd48bd10b941025fb84103bc6d4ae67d4a90c3628932
-
SSDEEP
1536:KkFivYhF/l7kHbAnNcEASwRk8ts+whnCFpxGUoOKp8oZFXn+q:KyF/l7kHbAnNcEASwRk8ts+whnCFpxCX
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2536 NOTEPAD.EXE