Analysis
- geolocation tags
- max time kernel
60s - max time network
64s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
20/07/2026, 08:39
General
- Target BootstrapperNew.exe
- Size 8.3MB
- Sample260720-kkc42aby2m
- SHA256 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"C:\Users\Admin\AppData\Local\Temp\BootstrapperNew.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1376-0-0x00007FFD0856F000-0x00007FFD08570000-memory.dmp
memory/1376-1-0x0000020922CA0000-0x00000209234E6000-memory.dmp
memory/1376-2-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-3-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-4-0x0000020923A00000-0x0000020923A10000-memory.dmp
memory/1376-5-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-6-0x000002093DC20000-0x000002093DC28000-memory.dmp
memory/1376-7-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-9-0x000002093DC80000-0x000002093DC8E000-memory.dmp
memory/1376-8-0x0000020943790000-0x00000209437CE000-memory.dmp
memory/1376-10-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-17-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-18-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-19-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-20-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-21-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-22-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp
memory/1376-23-0x00007FFD083E0000-0x00007FFD08D84000-memory.dmp