Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
25/04/2026, 00:07
General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260425-aefb4ag17x
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
Malware Config
Signatures
- Modifies system certificate store 2 TTPs 5 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"1⤵
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/996-0-0x00000182BD990000-0x00000182BE1D6000-memory.dmp
memory/996-1-0x00000182BFE30000-0x00000182BFE40000-memory.dmp
memory/996-2-0x00000182BFE30000-0x00000182BFE40000-memory.dmp
memory/996-3-0x00000182D8700000-0x00000182D8710000-memory.dmp
memory/996-4-0x00000182DC9B0000-0x00000182DC9B8000-memory.dmp
memory/996-5-0x00000182BFE30000-0x00000182BFE40000-memory.dmp
memory/996-7-0x00000182DCA00000-0x00000182DCA0E000-memory.dmp
memory/996-6-0x00000182DCA30000-0x00000182DCA68000-memory.dmp
memory/996-14-0x00000182BFE30000-0x00000182BFE40000-memory.dmp
memory/996-15-0x00000182BFE30000-0x00000182BFE40000-memory.dmp
memory/996-16-0x00000182BFE40000-0x00000182BFE4C000-memory.dmp
memory/996-17-0x00000182D85A0000-0x00000182D864D000-memory.dmp
memory/996-18-0x00000182BFE30000-0x00000182BFE40000-memory.dmp