Analysis
- max time kernel
149s - max time network
123s - platform
windows11-21h2_x64 - resource
win11-20250610-en - resource tags
- submitted
08/05/2026, 14:18
General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260508-rmffhadw7q
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
Malware Config
Signatures
- Modifies system certificate store 2 TTPs 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"1⤵
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1316-0-0x0000014962000000-0x0000014962846000-memory.dmp
memory/1316-1-0x000001497D090000-0x000001497D0A0000-memory.dmp
memory/1316-2-0x000001497D090000-0x000001497D0A0000-memory.dmp
memory/1316-3-0x0000014962D10000-0x0000014962D20000-memory.dmp
memory/1316-4-0x000001497D090000-0x000001497D0A0000-memory.dmp
memory/1316-5-0x000001497D040000-0x000001497D048000-memory.dmp
memory/1316-6-0x000001497D090000-0x000001497D0A0000-memory.dmp
memory/1316-8-0x000001497D050000-0x000001497D05E000-memory.dmp
memory/1316-7-0x000001497EF20000-0x000001497EF58000-memory.dmp
memory/1316-17-0x000001497D090000-0x000001497D0A0000-memory.dmp
memory/1316-18-0x000001497D090000-0x000001497D0A0000-memory.dmp
memory/1316-19-0x000001497D090000-0x000001497D0A0000-memory.dmp
memory/1316-20-0x0000014962C60000-0x0000014962C6C000-memory.dmp
memory/1316-21-0x0000014902260000-0x0000014902272000-memory.dmp
memory/1316-22-0x000001497D090000-0x000001497D0A0000-memory.dmp