Analysis
- user interaction
yes - max time kernel
40s - max time network
3s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
07/05/2026, 21:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OderSo Launcher.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
OderSo Launcher.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target OderSo Launcher.exe
- Size 28.9MB
- Sample260507-1nltcaew4m
- SHA256 1643afed4e013e2052b574977797a1e00851d2155ef21a3e7a8ce4c052f1cbc1
- MD5 6c61d83e84cb2437fb9879684c82ff8c
- SHA1 9386fffafc6cc064b135c34c69371d6cb3637c50
- SHA512 7c8feed87f532eb6fb9b2eff46f7c6430d1142b825aaa15f3755af74b11a3742d7f3afb48b34fff4d979350b68cb2a088f674c590055de2ef538c2c89c92cee1
- SSDEEP 196608:MkJPyOCu51ZTAFLzbjblIjvT7CThIPPBrYjPF4d:MkJPyFqAFLKnCTMGPG
- TLSH T1B5676C129BB44F2DCA8F5672F8B103754335C60B6B43929A685CC69C3E833760E55AFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1472 OderSo Launcher.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1472 OderSo Launcher.exe