100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116

Login
Reports

Overview

overview

Static

static

NewLaunche...64.exe

windows10-2004-x64

NewLaunche...64.exe

windows11-21h2-x64

$PLUGINSDI...ls.dll

windows10-2004-x64

$PLUGINSDI...ls.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDIR/UAC.dll

windows10-2004-x64

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

$PLUGINSDI...ll.dll

windows10-2004-x64

$PLUGINSDI...ll.dll

windows11-21h2-x64

resources/...lzmajs

ubuntu-18.04-amd64

resources/...lzmajs

debian-9-armhf

resources/...lzmajs

debian-9-mips

resources/...lzmajs

debian-9-mipsel

resources/...dex.js

windows10-2004-x64

resources/...dex.js

windows11-21h2-x64

resources/...ild.sh

ubuntu-18.04-amd64

resources/...ild.sh

debian-9-armhf

resources/...ild.sh

debian-9-mips

resources/...ild.sh

debian-9-mipsel

resources/...fig.sh

ubuntu-18.04-amd64

resources/...fig.sh

debian-9-armhf

resources/...fig.sh

debian-9-mips

resources/...fig.sh

debian-9-mipsel

resources/...i.node

ubuntu-18.04-amd64

resources/...i.node

ubuntu-18.04-amd64

resources/...i.node

ubuntu-18.04-amd64

resources/...i.node

ubuntu-18.04-amd64

resources/...pi.dll

windows10-2004-x64

resources/...pi.dll

windows11-21h2-x64

resources/...ma.dll

windows10-2004-x64

resources/...ma.dll

windows11-21h2-x64

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
30/05/2026, 16:20

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NewLauncher-2.0.9-windows-x64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

NewLauncher-2.0.9-windows-x64.exe

Resource

win11-20260513-en

windows11-21h2-x64

16 signatures

150 seconds

defense_evasion discovery execution spyware stealer

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

$PLUGINSDIR/UAC.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

antivm discovery

Behavioral task

behavioral13

Sample

resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

resources/app.asar.unpacked/node_modules/lzma-native/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

resources/app.asar.unpacked/node_modules/lzma-native/index.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral22

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/electron.napi.node

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/node.napi.node

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/electron.napi.node

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/node.napi.node

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/electron.napi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/electron.napi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/liblzma.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/liblzma.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh
Size 733B
Sample260530-ts8eksbz4m
SHA256 100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116
MD5 e886188759f08df991ad8af4bbc333c1
SHA1 b9644330527cb91fc20e2d66a93c8380f71932ff
SHA512 b4b30187505941eb75d44bdb51d4bc9ee778034d0850c7253a38ca636a620c9c6ae8954e43515b57ef409adcb6a91976e4e92f49b466c6c38e7bd33a79340ce8
TLSH
T1CD019C17E456365B2E2CC6A273EE6893EA05AEC26F2C551FA0803A7873BF5075610C86
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir
File opened for reading	/proc/filesystems	tar

Processes

/tmp/resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh
/tmp/resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh
1⤵
PID:763
- /bin/mkdir
  mkdir -p /liblzma
  2⤵
  - Reads runtime system information
  PID:764
- /bin/tar
  tar xvjf
  2⤵
  - Reads runtime system information
  PID:765

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

node_liblzma_config.log

Path /liblzma/node_liblzma_config.log
Size 177B
SHA256 ecb6f9eacf90e52d03358a6f2202762f4cce87816101550c1bc03f6c2996047b
MD5 7af24854eeeb6bb561caa6f154e31b70
SHA1 23809f1777c2b0343fc385eb9afd3a62588822ef
SHA512 3c2a26e64a7d7f03792f97260f97752c5f5f2712e736410d0b867bf5f4d3619fed1b16a0615b44f2d3aec04b88757b01fe8e367961791203c00beee93f013083
TLSH
T11FC0128662462259AAA3454083F6C955526124AAA14A12B2179102667E601B098EBCD1
MD5 SHA1 SHA512 TLSH

Submit Download