Analysis
- user interaction
yes - max time kernel
149s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/04/2026, 16:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NewLAuncher fixing files.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target NewLAuncher fixing files.exe
- Size 37.0MB
- Sample260422-tlqaesfs2v
- SHA256 02954c75d4adfdb1b4b6522ac815e88af7b4b97e573193682c9d79089d65c81b
- MD5 a19f4d48342ff187b3c7b5d1be93a540
- SHA1 396620585e8aa13be56bc945225e10083991d020
- SHA512 023477a4b48f8ad134a8556710f97f8ece65ad50f488f2880a8a9d9fd061ec1d8216d3231b7f0a759405b19553e63cc6a5290df864c4d69fe5887b8397fa9850
- SSDEEP 6144:Jj0F85wy7zaOhC6C9jJTGQ9u3YoAGuxdV:Jj0ia/99al3YFLzV
- TLSH T14687273063E2954BF42A7AB72121EBB3D1660EE8B55585C206FEBDDFB49B0410F67483
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2648 wrote to memory of 2256 2648 NewLAuncher fixing files.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\NewLAuncher fixing files.exe"C:\Users\Admin\AppData\Local\Temp\NewLAuncher fixing files.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2648 -
C:\Users\Admin\AppData\Local\Temp\NewLAuncher fixing files.exe"C:\Users\Admin\AppData\Local\Temp\NewLAuncher fixing files.exe"2⤵PID:2256
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\NewLAuncher fixing files.exe.log
- Size 654B
- SHA256 e31b18f21621d9983bfdf1ea3e53884a9d58b8ffd79e0e5790da6f3a81a8b9d3
- MD5 2cbbb74b7da1f720b48ed31085cbd5b8
- SHA1 79caa9a3ea8abe1b9c4326c3633da64a5f724964
- SHA512 ecf02d5240e0c1c005d3ab393aa7eff62bd498c2db5905157e2bf6d29e1b663228a9583950842629d1a4caef404c8941a0c7799b1a3bd1eb890a09fdb7efcff9
- TLSH T119F0A2302371E1C8C9263F422C0D2A4966AF474A7B50FE0C7694635DD825167AF313F3
- MD5 SHA1 SHA512 TLSH