General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260623-1vnaragx2w
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
- MD5 c9f1c55b26e7f781b65a96ea8190517d
- SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
- SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
- SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
- TLSH T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
BootstrapperNew.exe
Resource
win10v2004-20260513-en
22 signatures
900 seconds
Behavioral task
behavioral2
Sample
BootstrapperNew.exe
Resource
win11ltsc2024-20260617-en
1 signatures
900 seconds
Malware Config
Targets
-
- Target BootstrapperNew.exe
- Size 8.3MB
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
- MD5 c9f1c55b26e7f781b65a96ea8190517d
- SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
- SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
- SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
- TLSH T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.