Analysis
- user interaction
yes - max time kernel
298s - max time network
203s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
30/05/2026, 17:44
General
- Target Tenacity-Launcher-main/Start Windows.bat
- Size 1019B
- Sample260530-wbfpcaav2t
- SHA256 c62dad4d5ba783441de8bb07766a12e2864e3400ce850914bf14977d9657030a
Malware Config
Signatures
- Badlisted process makes network request 3 IoCs
Network request originating from process or tool commonly abused by malware.
- Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Tenacity-Launcher-main\Start Windows.bat"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\Tenacity-Launcher-main\files\Update-Tenacity.ps1" -Root "C:\Users\Admin\AppData\Local\Temp\Tenacity-Launcher-main\." -Repo "xoo0524tw/Tenacity-Launcher"2⤵
- Badlisted process makes network request
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
-
C:\Users\Admin\AppData\Local\Temp\Tenacity-Launcher-main\files\jre\bin\java.exe"C:\Users\Admin\AppData\Local\Temp\Tenacity-Launcher-main\files\jre\bin\java.exe" -noverify -Djava.library.path="..\files\natives" -cp "..\Tenacity.jar;..\files\libs\*" net.minecraft.client.main.Main --version Tenacity --accessToken 0 --userProperties {} --gameDir "." --assetsDir "..\files\assets" --assetIndex 1.8 --width 854 --height 4802⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
__PSScriptPolicyTest_calqc3iz.zdb.ps1
memory/3148-114-0x0000000002C50000-0x0000000002C60000-memory.dmp
memory/3148-71-0x0000000002B90000-0x0000000002BA0000-memory.dmp
memory/3148-36-0x0000000002AC0000-0x0000000002AD0000-memory.dmp
memory/3148-39-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3148-195-0x0000000002AC0000-0x0000000002AD0000-memory.dmp
memory/3148-196-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3148-194-0x0000000002850000-0x0000000002AC0000-memory.dmp
memory/3148-193-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/3148-186-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/3148-118-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/3148-44-0x0000000002AF0000-0x0000000002B00000-memory.dmp
memory/3148-45-0x0000000002B00000-0x0000000002B10000-memory.dmp
memory/3148-47-0x0000000002B10000-0x0000000002B20000-memory.dmp
memory/3148-49-0x0000000002B20000-0x0000000002B30000-memory.dmp
memory/3148-52-0x0000000002B30000-0x0000000002B40000-memory.dmp
memory/3148-54-0x0000000002B40000-0x0000000002B50000-memory.dmp
memory/3148-57-0x0000000002B50000-0x0000000002B60000-memory.dmp
memory/3148-56-0x0000000002850000-0x0000000002AC0000-memory.dmp
memory/3148-61-0x0000000002B60000-0x0000000002B70000-memory.dmp
memory/3148-60-0x0000000002AC0000-0x0000000002AD0000-memory.dmp
memory/3148-65-0x0000000002B70000-0x0000000002B80000-memory.dmp
memory/3148-64-0x0000000002AD0000-0x0000000002AE0000-memory.dmp
memory/3148-68-0x0000000002B80000-0x0000000002B90000-memory.dmp
memory/3148-67-0x0000000002AE0000-0x0000000002AF0000-memory.dmp
memory/3148-116-0x0000000002BC0000-0x0000000002BD0000-memory.dmp
memory/3148-70-0x0000000002AF0000-0x0000000002B00000-memory.dmp
memory/3148-74-0x0000000002BA0000-0x0000000002BB0000-memory.dmp
memory/3148-73-0x0000000002B00000-0x0000000002B10000-memory.dmp
memory/3148-78-0x0000000002BB0000-0x0000000002BC0000-memory.dmp
memory/3148-76-0x0000000002B10000-0x0000000002B20000-memory.dmp
memory/3148-80-0x0000000002B20000-0x0000000002B30000-memory.dmp
memory/3148-81-0x0000000002BC0000-0x0000000002BD0000-memory.dmp
memory/3148-84-0x0000000002B30000-0x0000000002B40000-memory.dmp
memory/3148-85-0x0000000002BD0000-0x0000000002BE0000-memory.dmp
memory/3148-92-0x0000000002BE0000-0x0000000002BF0000-memory.dmp
memory/3148-91-0x0000000002B40000-0x0000000002B50000-memory.dmp
memory/3148-96-0x0000000002BF0000-0x0000000002C00000-memory.dmp
memory/3148-95-0x0000000002B50000-0x0000000002B60000-memory.dmp
memory/3148-117-0x0000000002C60000-0x0000000002C70000-memory.dmp
memory/3148-99-0x0000000002B60000-0x0000000002B70000-memory.dmp
memory/3148-102-0x0000000002B70000-0x0000000002B80000-memory.dmp
memory/3148-105-0x0000000002B80000-0x0000000002B90000-memory.dmp
memory/3148-104-0x0000000002C20000-0x0000000002C30000-memory.dmp
memory/3148-103-0x0000000002C10000-0x0000000002C20000-memory.dmp
memory/3148-108-0x0000000002C30000-0x0000000002C40000-memory.dmp
memory/3148-107-0x0000000002B90000-0x0000000002BA0000-memory.dmp
memory/3148-110-0x0000000002BA0000-0x0000000002BB0000-memory.dmp
memory/3148-111-0x0000000002C40000-0x0000000002C50000-memory.dmp
memory/3148-113-0x0000000002BB0000-0x0000000002BC0000-memory.dmp
memory/3148-23-0x0000000002850000-0x0000000002AC0000-memory.dmp
memory/3148-100-0x0000000002C00000-0x0000000002C10000-memory.dmp
memory/3148-33-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/3148-41-0x0000000002AE0000-0x0000000002AF0000-memory.dmp
memory/3148-120-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/3148-122-0x0000000002C70000-0x0000000002C80000-memory.dmp
memory/3148-121-0x0000000002BD0000-0x0000000002BE0000-memory.dmp
memory/3148-125-0x0000000002C80000-0x0000000002C90000-memory.dmp
memory/3148-124-0x0000000002BE0000-0x0000000002BF0000-memory.dmp
memory/3148-130-0x0000000002CA0000-0x0000000002CB0000-memory.dmp
memory/3148-131-0x0000000002C00000-0x0000000002C10000-memory.dmp
memory/3148-129-0x0000000002C90000-0x0000000002CA0000-memory.dmp
memory/3148-128-0x0000000002BF0000-0x0000000002C00000-memory.dmp
memory/3148-138-0x0000000002CC0000-0x0000000002CD0000-memory.dmp
memory/3148-137-0x0000000002CB0000-0x0000000002CC0000-memory.dmp
memory/3148-136-0x0000000002C20000-0x0000000002C30000-memory.dmp
memory/3148-135-0x0000000002C10000-0x0000000002C20000-memory.dmp
memory/3148-140-0x0000000002C30000-0x0000000002C40000-memory.dmp
memory/3148-141-0x0000000002CD0000-0x0000000002CE0000-memory.dmp
memory/3148-144-0x0000000002C40000-0x0000000002C50000-memory.dmp
memory/3148-145-0x0000000002CE0000-0x0000000002CF0000-memory.dmp
memory/3148-152-0x0000000002C60000-0x0000000002C70000-memory.dmp
memory/3148-151-0x0000000002D00000-0x0000000002D10000-memory.dmp
memory/3148-150-0x0000000002CF0000-0x0000000002D00000-memory.dmp
memory/3148-149-0x0000000002C50000-0x0000000002C60000-memory.dmp
memory/3148-154-0x0000000002D10000-0x0000000002D20000-memory.dmp
memory/3148-153-0x0000000002C70000-0x0000000002C80000-memory.dmp
memory/3148-169-0x0000000002D60000-0x0000000002D70000-memory.dmp
memory/3148-172-0x0000000002D50000-0x0000000002D60000-memory.dmp
memory/3148-171-0x0000000002D80000-0x0000000002D90000-memory.dmp
memory/3148-170-0x0000000002D70000-0x0000000002D80000-memory.dmp
memory/3148-164-0x0000000002C90000-0x0000000002CA0000-memory.dmp
memory/3148-163-0x0000000002D40000-0x0000000002D50000-memory.dmp
memory/3148-162-0x0000000002D30000-0x0000000002D40000-memory.dmp
memory/3148-161-0x0000000002D20000-0x0000000002D30000-memory.dmp
memory/3148-160-0x0000000002C80000-0x0000000002C90000-memory.dmp
memory/3148-168-0x0000000002CA0000-0x0000000002CB0000-memory.dmp
memory/3148-175-0x0000000002CB0000-0x0000000002CC0000-memory.dmp
memory/3148-177-0x0000000002D90000-0x0000000002DA0000-memory.dmp
memory/3148-176-0x0000000002CC0000-0x0000000002CD0000-memory.dmp
memory/3148-178-0x0000000002DA0000-0x0000000002DB0000-memory.dmp
memory/3148-180-0x0000000000DA0000-0x0000000000DA1000-memory.dmp
memory/3148-181-0x0000000002CD0000-0x0000000002CE0000-memory.dmp
memory/3148-185-0x0000000002CE0000-0x0000000002CF0000-memory.dmp
memory/4200-10-0x00000219C69C0000-0x00000219C6B82000-memory.dmp
memory/4200-9-0x00000219C4060000-0x00000219C4070000-memory.dmp
memory/4200-2-0x00000219C6280000-0x00000219C62A2000-memory.dmp
memory/4200-1-0x00000219C4060000-0x00000219C4070000-memory.dmp
memory/4200-0-0x00000219C4060000-0x00000219C4070000-memory.dmp
memory/4200-11-0x00000219C70C0000-0x00000219C75E8000-memory.dmp
memory/4200-12-0x00000219C4060000-0x00000219C4070000-memory.dmp
memory/4200-13-0x00000219C4060000-0x00000219C4070000-memory.dmp
memory/4200-14-0x00000219C4060000-0x00000219C4070000-memory.dmp