Analysis
- max time kernel
148s - max time network
157s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
18/04/2026, 16:29
General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260418-tzcaqacx71
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
Malware Config
Signatures
- Modifies system certificate store 2 TTPs 5 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"1⤵
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1072-0-0x0000020D4EE70000-0x0000020D4F6B6000-memory.dmp
memory/1072-1-0x0000020D515B0000-0x0000020D515C0000-memory.dmp
memory/1072-2-0x0000020D515B0000-0x0000020D515C0000-memory.dmp
memory/1072-3-0x0000020D51580000-0x0000020D51590000-memory.dmp
memory/1072-4-0x0000020D69EB0000-0x0000020D69EB8000-memory.dmp
memory/1072-5-0x0000020D515B0000-0x0000020D515C0000-memory.dmp
memory/1072-7-0x0000020D6DC70000-0x0000020D6DC7E000-memory.dmp
memory/1072-6-0x0000020D6E870000-0x0000020D6E8A8000-memory.dmp
memory/1072-16-0x0000020D515B0000-0x0000020D515C0000-memory.dmp
memory/1072-17-0x0000020D515B0000-0x0000020D515C0000-memory.dmp
memory/1072-18-0x0000020D51390000-0x0000020D5139C000-memory.dmp
memory/1072-19-0x0000020D6E210000-0x0000020D6E222000-memory.dmp
memory/1072-20-0x0000020D515B0000-0x0000020D515C0000-memory.dmp