bootstrapper[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
bootstrapper.zip
Size 25.1MB
Sample260628-29sdpag13k
SHA256 ec99542b90e81aa8bd809c985811f194a9dbdd5bf02d0376e05ae91c7cadb0a0
MD5 db1139b6ae0194169b49b505e8072c1a
SHA1 1bd6aee3b78e17f0798a17c032f3254f0ea80579
SHA512 e20bd7bec6b9298ef793d2abb7ba851fc65b8093cd86aee9cd088b7c1a81fed02596ca4cbd6854491031ea5d7d71beab0fbb39cce99872794c268b5a6869f2ff
SSDEEP 786432:gPbzTuXB6YKqqiU7aPjbnXFoxdlV1Rg/+IZBNnKkA8u7u5:gTsuiU7aPHXFoXlNIZPndpu7K
TLSH
T10C4733D4992FA41D068C2731F64B67068DC6BAECE4EC715EE05FD6A391E3C413E66238
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/bootstrapper/bootstrapper.msi

File Explorer

bootstrapper.zip

.zip 25.1MB
bootstrapper/bootstrapper.msi

.msi 25.3MB

bootstrapper.zip

SHA256 ec99542b90e81aa8bd809c985811f194a9dbdd5bf02d0376e05ae91c7cadb0a0
MD5 db1139b6ae0194169b49b505e8072c1a
SHA1 1bd6aee3b78e17f0798a17c032f3254f0ea80579
SHA512 e20bd7bec6b9298ef793d2abb7ba851fc65b8093cd86aee9cd088b7c1a81fed02596ca4cbd6854491031ea5d7d71beab0fbb39cce99872794c268b5a6869f2ff
SSDEEP 786432:gPbzTuXB6YKqqiU7aPjbnXFoxdlV1Rg/+IZBNnKkA8u7u5:gTsuiU7aPHXFoXlNIZPndpu7K
TLSH
T10C4733D4992FA41D068C2731F64B67068DC6BAECE4EC715EE05FD6A391E3C413E66238
MD5 SHA1 SHA512 SSDEEP TLSH

Password

rblxexec

bootstrapper/bootstrapper.msi

SHA256 221a35020d7e9107469ff05d71a9f6bc470ba90e06e8bef0dc7a7057a88ccd2b
MD5 da347c1a215b6ef522ae3e9851352065
SHA1 a183881429236efd5dec79809d9a35c181abaa45
SHA512 2ec2c852b8feb7d5390b13c86e4435cf10cbb30a78078e60f9e9d107be538d1a3c4eca76e52bac442f9b362c0eee0f1510ccc16a7a73f08a4961605a61a76fc9
SSDEEP 786432:OMQ2qbFhMyC1OHhpFrZhOf4g4Tq2LBaPdU69R:5Q2qbFSyC1OHhvZhOYTA/r
TLSH
T18B47339EC6629243CC3F4C348AB47892D7F79E15A406CD0F651AB369BAF37E032B9145
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a2b0a620eb9e1418fc3cf4dc01a5a375e1ef6727dcd6a395215ccfc68b76740e54619dfa4ffaaa7ed176d5ba76e9e35b

Digest Algorithm

sha384

Digest Matches

Trusted

Not trusted

Prehash

Signing Certificate

CN=CSV Data Hash Checker,OU=Platform Operations,O=IvyBrook Creek Digital LLC,L=Dublin,C=IE

Chains

Jun 28, 2026

CN=CSV Data Hash Checker,OU=Platform Operations,O=IvyBrook Creek Digital LLC,L=Dublin,C=IE

Subject

CN=CSV Data Hash Checker,OU=Platform Operations,O=IvyBrook Creek Digital LLC,L=Dublin,C=IE

Serial Number

51:39:66:a1:c8:62:40:9e:4c:58:22:11:87:bb:8a:47

Issuer

CN=CSV Data Hash Checker,OU=Platform Operations,O=IvyBrook Creek Digital LLC,L=Dublin,C=IE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 28, 2026 - Jun 28, 2028

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034