Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/05/2026, 12:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SFAlphaLauncher_Protected.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SFAlphaLauncher_Protected.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target SFAlphaLauncher_Protected.exe
- Size 14.4MB
- Sample260505-phcspsbw2r
- SHA256 c9f6fe738fa197f34ac3851a168d417e828316c42018b68511c936b2e81f7656
- MD5 e8a0dd30d4b33979992d26cac97d4514
- SHA1 b19c8c7514168f3c10b07c8229f361aabecfbbd7
- SHA512 6565703988e6c36bd1341f9d713858b4e9f0b4e92f55fe2a9299d7cf267e071435abc5e6f3ef28800e0ecbb4490df5ee6a435c2f450afa28f75823da32e1d640
- SSDEEP 393216:BDhNGIdMs4MXZEDmD9FfAUfzUsP67jp4xpi2RTEIVmO9ul:BDCJsv6mDzfBgsSxMl9/9Y
- TLSH T158E6336273EB85B6CC6716716EE5D3BC7664C618CF23C18B92D21B21B871AD390353AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SFAlphaLauncher_Protected.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4952 SFAlphaLauncher_Protected.exe