General

  • Target
    boltv2.zip
  • Size 806KB
  • Sample261024-ymm9nsdy3p
  • SHA256 7151ca176febb89e103184f34757a3661be3fb9f4fb5f4de8f286166f9afcf61
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • boltv2.zip
    .zip .ps1 806KB
  • boltv2/combos/combos.txt
    10B
  • boltv2/config.yml
    416B
  • boltv2/hwid_checker.exe
    .exe 332KB
  • boltv2/libgcc_s_seh-1.dll
    .dll 156KB
  • boltv2/libstdc++-6.dll
    .dll 1.7MB
  • boltv2/libwinpthread-1.dll
    .dll 55KB
  • boltv2/proxies.txt
    19B
  • boltv2/readme.txt
    172B

boltv2.zip

  • SHA256 7151ca176febb89e103184f34757a3661be3fb9f4fb5f4de8f286166f9afcf61
  • MD5 SHA1 SHA512 SSDEEP TLSH