boltv2.zip
- SHA256 7151ca176febb89e103184f34757a3661be3fb9f4fb5f4de8f286166f9afcf61
Overview
overview
8Static
static
5boltv2.zip
windows11-21h2-x64
1boltv2/com...os.txt
windows11-21h2-x64
3boltv2/config.yml
windows11-21h2-x64
3boltv2/hwi...er.exe
windows11-21h2-x64
8boltv2/lib...-1.dll
windows11-21h2-x64
1boltv2/lib...-6.dll
windows11-21h2-x64
1boltv2/lib...-1.dll
windows11-21h2-x64
1boltv2/proxies.txt
windows11-21h2-x64
3boltv2/readme.txt
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
boltv2.zip
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
boltv2/combos/combos.txt
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
boltv2/config.yml
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
boltv2/hwid_checker.exe
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
boltv2/libgcc_s_seh-1.dll
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
boltv2/libstdc++-6.dll
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
boltv2/libwinpthread-1.dll
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
boltv2/proxies.txt
Resource
win11-20260911-en
Behavioral task
behavioral9
Sample
boltv2/readme.txt
Resource
win11-20260911-en
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
| resource |
|---|
| unpack001/boltv2/libwinpthread-1.dll |
| unpack001/boltv2/libwinpthread-1.dll |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/boltv2/hwid_checker.exe |
| unpack001/boltv2/libwinpthread-1.dll |
Unsigned PE
Checks for missing Authenticode signature.
Jun 9, 2026
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Samsung Electronics Co.\, Ltd.,O=Samsung Electronics Co.\, Ltd.,L=Suwon-si,ST=Gyeonggi-do,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Feb 27, 2023
CN=Certchip,O=Certchip,ST=Gyeonggi-do,C=KR
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Certchip,O=Certchip,ST=Gyeonggi-do,C=KR
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE
Checks for missing Authenticode signature.