General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260624-ws36zaet4m
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
- MD5 c9f1c55b26e7f781b65a96ea8190517d
- SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
- SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
- SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
- TLSH T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
BootstrapperNew.exe
Resource
win10ltsc2021-20260513-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target BootstrapperNew.exe
- Size 8.3MB
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
- MD5 c9f1c55b26e7f781b65a96ea8190517d
- SHA1 dad71e6ac2ad9e3ce30152f993d0c765008c6b5a
- SHA512 aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d
- SSDEEP 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+
- TLSH T169961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.