5f39e7d73c5195e22f2a882fa156bb23e367727dee5f47a04f55e22e61a52e43

Analysis

max time kernel
150s
max time network
109s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 19:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Boostraptler_51.5.86108.exe
Size 2.7MB
Sample260925-x4g9bavdpc
SHA256 5f39e7d73c5195e22f2a882fa156bb23e367727dee5f47a04f55e22e61a52e43
MD5 2e28729f43fc419ca8c721cc71b8ff0c
SHA1 f9acdf4696a09a383cf55910d408f667bf2714c1
SHA512 8af1d9ad479b0680d0ac4762b7917f46a1f2cbe09d55049565f45bbb0161e038e16caf06fe624c6b6d208dca31e9d2cc7d7756cf9e549d1a5e996d9e2a82230f
SSDEEP 24576:+fGyOD0Jh3R4UaVaidQr0N2rbb+tknCmy+8tDLYzWQhkM2:PyODMDsaHr4Obb+ynsB8zn2
TLSH
T1A7D53913BF9111ADC896E23AD9A75291BA31BC985B3533C32B1576B83E363D4DB70B04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Boostraptler_51.5.86108.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Boostraptler_51.5.86108.exe

C:\Users\Admin\AppData\Local\Temp\Boostraptler_51.5.86108.exe
"C:\Users\Admin\AppData\Local\Temp\Boostraptler_51.5.86108.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
PID:1324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1324-0-0x0000000140000000-0x000000014003D000-memory.dmp

Download

memory/1324-1-0x0000000140000000-0x000000014003D000-memory.dmp