Analysis
-
max time kernel
22s -
max time network
36s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system -
submitted
05-07-2023 23:09
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win10v2004-20230703-en
General
-
Target
Launcher.exe
-
Size
1125.4MB
-
MD5
d6bb390dd0e507ab7a21103ce6988f5f
-
SHA1
e9261d728047872157b3a1d105faa30498568410
-
SHA256
8e404677b93e7dea53123dd73ec630dfe2b257bca249ba82ca05752db2ec511d
-
SHA512
e8166a6e571e11bf1b13cc4ccae87729958ed5e9d37af8be1791705875696bd48ff1af17725ae3ec63ae2c4120aa56bedf29a398f9519898f496e03c2db8fde3
-
SSDEEP
786432:3hCImgE7D9zYx25tBMBliqmvQPMM4LivtgDAXZvo8sqTtLwSTRpf4P1wT1aPrvjs:3WgkY2tC3PMM3yAJvoZrvjs
Malware Config
Signatures
-
Loads dropped DLL 3 IoCs
pid Process 3024 Launcher.exe 3024 Launcher.exe 3024 Launcher.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3024 Launcher.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
\Users\Admin\AppData\Local\Temp\.net\Launcher\EGlocfzpWVNj40RP8BgAw8Glrkg6uhc=\D3DCompiler_47_cor3.dll
Filesize4.7MB
MD52191e768cc2e19009dad20dc999135a3
SHA1f49a46ba0e954e657aaed1c9019a53d194272b6a
SHA2567353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
SHA5125adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
-
\Users\Admin\AppData\Local\Temp\.net\Launcher\EGlocfzpWVNj40RP8BgAw8Glrkg6uhc=\PresentationNative_cor3.dll
Filesize1.2MB
MD52dfb41d1d9b1f5c9bc4da09f2e295b24
SHA197ddf4cdad886463c190784d788887b4d01d6e0a
SHA2567e22229f80a3c9e8eddb32ddf54f6a1764ee726998bab475a0ddd9f7ce53aaf0
SHA512b04e1d8f0e9408dcdc7ecc8dcc1de5e7972aab09c60c950ca8a0000d01acd84a85909aec1d702dc2118cd63f35249e25b55a0193eaf2c53a68f8fcc2b38a07dd
-
Filesize
1.9MB
MD5a27b3f5c4a0b4c6993675bf964533721
SHA18eabdf3a1abb57c9a3f330bb3c64ede6f487b184
SHA256fce483fc2381a6c58ac46e54209f6bba4b3c17e3883ee5d4e7879644858286cb
SHA512bac51ef7996b1bc2c688e44432a4f869e819e4aeb0871a2067d49ad12cff3f5730ba0a2d31e864f9544621e3ce794a7fffee3306ef3bbe9daec8a0a545a9de90