Analysis
- max time kernel
148s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
22/06/2026, 14:37
General
- Target Launcher.cmd
- Size 28B
- Sample260622-ry4mgads8w
- SHA256 ce1e33483d353200a266b3bc383ccf500e5a760c6dcd8218747260f5bbe39509
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Launcher.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\luajit.exeluajit.exe uix.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3160-0-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-4-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-7-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-42-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-53-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-63-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-69-0x00000201C6090000-0x00000201C6091000-memory.dmp
memory/3160-71-0x00000201C6090000-0x00000201C6091000-memory.dmp
memory/3160-68-0x00000201C6090000-0x00000201C6091000-memory.dmp
memory/3160-62-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-61-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-60-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-59-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-58-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-57-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-56-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-55-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-78-0x00000201C60E0000-0x00000201C60E1000-memory.dmp
memory/3160-76-0x00000201C60A0000-0x00000201C60D2000-memory.dmp
memory/3160-77-0x00000201C60E0000-0x00000201C60E1000-memory.dmp
memory/3160-54-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-52-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-51-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-50-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-49-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-48-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-47-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-46-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-45-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-44-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-43-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-41-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-40-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-39-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-37-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-36-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-35-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-34-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-33-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-32-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-31-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-30-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-29-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-28-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-27-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-26-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-25-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-24-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-22-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-21-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-19-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-18-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-17-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-16-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-15-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-14-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-13-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-12-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-11-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-10-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-9-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-8-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-6-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-5-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-3-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-2-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-38-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-23-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-20-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-1-0x00007FF707110000-0x00007FF707120000-memory.dmp
memory/3160-82-0x00000201C6090000-0x00000201C6091000-memory.dmp
memory/3160-83-0x00000201C60A0000-0x00000201C60D2000-memory.dmp
memory/3160-84-0x00000201C60E0000-0x00000201C60E1000-memory.dmp