Analysis
- max time kernel
148s - max time network
124s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
25/04/2026, 00:07
General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260425-aefb4ag17x
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
Malware Config
Signatures
- Modifies system certificate store 2 TTPs 5 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"1⤵
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3884-0-0x000002081A1A0000-0x000002081A9E6000-memory.dmp
memory/3884-1-0x00000208350F0000-0x0000020835100000-memory.dmp
memory/3884-2-0x00000208350F0000-0x0000020835100000-memory.dmp
memory/3884-3-0x000002081AE30000-0x000002081AE40000-memory.dmp
memory/3884-4-0x00000208350D0000-0x00000208350D8000-memory.dmp
memory/3884-5-0x00000208350F0000-0x0000020835100000-memory.dmp
memory/3884-7-0x0000020835100000-0x000002083510E000-memory.dmp
memory/3884-6-0x0000020839BD0000-0x0000020839C08000-memory.dmp
memory/3884-16-0x00000208350F0000-0x0000020835100000-memory.dmp
memory/3884-17-0x00000208350F0000-0x0000020835100000-memory.dmp
memory/3884-20-0x00000208350F0000-0x0000020835100000-memory.dmp
memory/3884-19-0x0000020839110000-0x0000020839122000-memory.dmp
memory/3884-18-0x000002081ADF0000-0x000002081ADFC000-memory.dmp