Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
- submitted
22/06/2026, 14:45
General
- Target Launcher.cmd
- Size 34B
- Sample260622-r4yneadw21
- SHA256 8c1e1046322e8d84cbc9f464299a65841183b6b9dd62d813a063822615d9449c
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Launcher.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\luajit.exeluajit.exe crt.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2868-54-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-63-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-62-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-61-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-130-0x00000000001F0000-0x00000000001F1000-memory.dmp
memory/2868-129-0x00000000001F0000-0x00000000001F1000-memory.dmp
memory/2868-128-0x00000000001F0000-0x00000000001F1000-memory.dmp
memory/2868-127-0x00000000001F0000-0x00000000001F1000-memory.dmp
memory/2868-60-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-59-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-58-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-57-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-56-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-55-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-51-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-50-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-49-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-48-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-46-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-44-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-43-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-42-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-41-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-40-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-39-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-38-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-37-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-36-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-35-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-34-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-31-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-30-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-29-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-27-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-26-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-25-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-24-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-23-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-22-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-19-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-18-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-17-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-15-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-14-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-13-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-12-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-9-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-6-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-5-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-4-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-3-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-2-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-1-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-0-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-53-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-52-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-47-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-45-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-32-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-33-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-28-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-21-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-20-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-16-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-11-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-10-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-8-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-7-0x000000005B2D0000-0x000000005B2E0000-memory.dmp
memory/2868-134-0x00000000001F0000-0x00000000001F1000-memory.dmp