Overview
overview
7Static
static
3Hack Launc...er.exe
windows7-x64
7Hack Launc...er.exe
windows10-2004-x64
7Hack Launc...ck.dll
windows7-x64
1Hack Launc...ck.dll
windows10-2004-x64
1Hack Launc...32.dll
windows7-x64
3Hack Launc...32.dll
windows10-2004-x64
3Hack Launc...ws.dll
windows7-x64
1Hack Launc...ws.dll
windows10-2004-x64
1Hack Launc...e4.dll
windows7-x64
3Hack Launc...e4.dll
windows10-2004-x64
3Hack Launc...-1.dll
windows7-x64
3Hack Launc...-1.dll
windows10-2004-x64
3Hack Launc...10.dll
windows7-x64
1Hack Launc...10.dll
windows10-2004-x64
1Hack Launc...rs.dll
windows7-x64
1Hack Launc...rs.dll
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
01-09-2023 03:44
Static task
static1
Behavioral task
behavioral1
Sample
Hack Launcher/Launcher.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Hack Launcher/Launcher.exe
Resource
win10v2004-20230831-en
Behavioral task
behavioral3
Sample
Hack Launcher/hack.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Hack Launcher/hack.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral5
Sample
Hack Launcher/irmfmodulewin32.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Hack Launcher/irmfmodulewin32.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral7
Sample
Hack Launcher/platforms/qwindows.dll
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Hack Launcher/platforms/qwindows.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral9
Sample
Hack Launcher/source/QtCore4.dll
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Hack Launcher/source/QtCore4.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral11
Sample
Hack Launcher/source/libgcc_s_dw2-1.dll
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Hack Launcher/source/libgcc_s_dw2-1.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral13
Sample
Hack Launcher/source/mingwm10.dll
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
Hack Launcher/source/mingwm10.dll
Resource
win10v2004-20230831-en
Behavioral task
behavioral15
Sample
Hack Launcher/updater/bdfilters.dll
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Hack Launcher/updater/bdfilters.dll
Resource
win10v2004-20230831-en
General
-
Target
Hack Launcher/Launcher.exe
-
Size
700.0MB
-
MD5
563159c95991cda7b11871f30279cfbc
-
SHA1
b27b1bc51aa7cc2df03c6d396215e9189a1d4832
-
SHA256
19287ab626e344f73fef7abede5ec466e776ab458c2b5152aa6c36a4abb13c65
-
SHA512
f671441bd2b6efb8512f0bc050d33cee014a7ef7ab5c6afb8570e35f41c3b954e08df9dbae97933a1505b07dca9efbdb0f0a85dbff296b42c49373a5aa09c4a3
-
SSDEEP
6144:pg4El4wGKh8D/ge/sCcFF5sM1CPRkJhKVTACJEoRSJeZ74qfR8PE:pg4ElHUg2sV5s6C5F0mEoRSJa7NaPE
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 2968 Launcher.exe 2968 Launcher.exe 2968 Launcher.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2968 Launcher.exe