Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/07/2026, 03:59
General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260720-ej3qeaev4n
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5104-0-0x00007FFB799CF000-0x00007FFB799D0000-memory.dmp
memory/5104-1-0x00000179EF950000-0x00000179F0196000-memory.dmp
memory/5104-2-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-3-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-4-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-5-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-6-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-7-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-9-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-8-0x00000179F1F40000-0x00000179F1F50000-memory.dmp
memory/5104-10-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-11-0x00000179F2B40000-0x00000179F2B48000-memory.dmp
memory/5104-12-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-13-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-14-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp
memory/5104-16-0x00000179F2B60000-0x00000179F2B6E000-memory.dmp
memory/5104-15-0x00000179F7750000-0x00000179F778E000-memory.dmp
memory/5104-17-0x00007FFB79840000-0x00007FFB7A1E4000-memory.dmp