00a730c07b1d9925f9938879c1bac7501fd735ca3b31d7b7c49b4a35438c5b07

Analysis

user interaction
yes
max time kernel
96s
max time network
100s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 15:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Boostrpaprer_V2.05.5b-Updated-Ver/Boostrarpper.exe
Size 2.1MB
Sample260812-st8laszdqh
SHA256 00a730c07b1d9925f9938879c1bac7501fd735ca3b31d7b7c49b4a35438c5b07
MD5 ad7a40fdbca66f079cc5c3727470a8ff
SHA1 62ad85eb2c513f2ddf4d42b0236ceec190667b4f
SHA512 5638d372aaea46d00d580444a09fd91813787792349470cdaaad630753326201522c5995649d8ac6de6e9c1fdce53ec165fa91abd17730502dd01029761078e8
SSDEEP 24576:ye5yUkW9HmGlWGckeVG4571bBnfNM/mj3okyvM49D:y4y0lnilPfOmj4hJD
TLSH
T1A7A55D3CAB2052A7CFC1A2791DFBE650952279C30526ED3B9A9D9C773F84F914480D2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\drivers\acpipwr.sy	Boostrarpper.exe

Executes dropped EXE 1 IoCs

pid	Process
708	acpipwr.sy

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
820	Process not Found

C:\Users\Admin\AppData\Local\Temp\Boostrpaprer_V2.05.5b-Updated-Ver\Boostrarpper.exe
"C:\Users\Admin\AppData\Local\Temp\Boostrpaprer_V2.05.5b-Updated-Ver\Boostrarpper.exe"
1⤵
- Drops file in Drivers directory
PID:1268

C:\Windows\system32\drivers\acpipwr.sy
C:\Windows\system32\drivers\acpipwr.sy
1⤵
- Executes dropped EXE
PID:708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

ntkrnlmp.pdb

Path C:\Users\Admin\AppData\Local\Temp\ntkrnlmp.pdb
Size 10.5MB
SHA256 e987244cfdc33cb195c34231d8905d9e87019b36f199d17ab0638187ce0aaf7f
MD5 566f8135567a80ba945eee5ce9be4f69
SHA1 26008b593f2deacd27d6c55220cbcacfeaeb1a37
SHA512 86bfd6689da02d75e8323b6420c35fc86c487906d82827ec595d6d308e9f32fb23aca9b2c72f071fab77ed78b3997b8fae5034bc105e1109f2e3df32c5603829
SSDEEP 49152:R85MWAL/kNIUlMy+1sA3w9QnZcaDkFAjcLU3I67bX3V/lxKPmng+Y99+1lM8faZJ:R85rADkNl63pnR7fDgf
TLSH
T150B60615BA937EF6DC5A457FA0160329F6F596CA03A947E33D46B3A90DC2212CF2E341
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acpipwr.sy

Path C:\Windows\System32\drivers\acpipwr.sy
Size 78KB
SHA256 6e8b49cf70bf854e8c59c7d27cefa89406caf8978461190dabb86dafcd8554e1
MD5 b96d75a000367c200958089728fc5cb8
SHA1 f329ae0fdf1e198bea6ba787e59cb73f90714002
SHA512 60fb02287aff7b7d7b7057be6f0a828c702a0ba9653fd4079d0e5bea3b476dc06cae4f27292684c9235ed21a498403bbf4bc6609c0d9c3c2de920e981ef1df17
SSDEEP 1536:Qn8/+PtpHLPxNn1szNYeYVxRqx+g1JOE7ubt6INPXWmT6A5+KA:5/yTxNKOesx8xIh6AGLA5I
TLSH
T1C173E0D1162CA4C2ED879D31A2C8D623BC70B3911E62D6F391A5D1790E867C16F2C9AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1268-0-0x00007FF7BB280000-0x00007FF7BB2AD000-memory.dmp

Download

memory/1268-3-0x00007FF7BB280000-0x00007FF7BB2AD000-memory.dmp

Download

memory/1268-27-0x00007FF7BB280000-0x00007FF7BB2AD000-memory.dmp

Download

memory/1268-39-0x00007FF7BB280000-0x00007FF7BB2AD000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads