Analysis
- max time kernel
298s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 05:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
malware.exe
Resource
win10v2004-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
malware.exe
Resource
win11ltsc2024-20260618-en
3 signatures
300 seconds
General
- Target malware.exe
- Size 84KB
- Sample260623-gem59sax9w
- SHA256 dd1dafc141661d2dd5331de7fe61c8183c6ade2a67fa8a689030279718e0be5a
- MD5 02e90b48ba0be175d6b5768d1884a187
- SHA1 429421690131d80b8b4de8d5e83abbf9fd51ad17
- SHA512 b351e8e3966358c850b79adaef3259c0003805270115a3df1568993d7dec1be71f7058e36dfe4299624c33ddd961e05c5999adf97f7337591fd7a5076d292fb4
- SSDEEP 1536:6hq1y5U7j9Kzoo9WkDd0nyLYDZW21u/1Bf2p2CNsIvfiu2i9:6hq1yK7AzPEkDunyLYDZtu/1Bug+sIdx
- TLSH T13C837B23F6E288B1E0710ABD9D58A795947FFD622C38B49B36A45D0E0E7C1C0A85D7D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 5972 weblaunchassist.exe - Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2894455325-857903158-4263030270-1000\Software\Microsoft\Windows\CurrentVersion\Run\WebLaunchAssist = "C:\\Users\\Admin\\AppData\\Local\\weblaunchassist.exe" malware.exe Set value (str) \REGISTRY\USER\S-1-5-21-2894455325-857903158-4263030270-1000\Software\Microsoft\Windows\CurrentVersion\Run\WebLaunchAssist = "C:\\Users\\Admin\\AppData\\Local\\weblaunchassist.exe" weblaunchassist.exe - System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language weblaunchassist.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language malware.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\malware.exe"C:\Users\Admin\AppData\Local\Temp\malware.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
PID:752
-
C:\Users\Admin\AppData\Local\weblaunchassist.exeC:\Users\Admin\AppData\Local\weblaunchassist.exe1⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
PID:5972
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\weblaunchassist.exe
- Size 84KB
- SHA256 dd1dafc141661d2dd5331de7fe61c8183c6ade2a67fa8a689030279718e0be5a
- MD5 02e90b48ba0be175d6b5768d1884a187
- SHA1 429421690131d80b8b4de8d5e83abbf9fd51ad17
- SHA512 b351e8e3966358c850b79adaef3259c0003805270115a3df1568993d7dec1be71f7058e36dfe4299624c33ddd961e05c5999adf97f7337591fd7a5076d292fb4
- SSDEEP 1536:6hq1y5U7j9Kzoo9WkDd0nyLYDZW21u/1Bf2p2CNsIvfiu2i9:6hq1yK7AzPEkDunyLYDZtu/1Bug+sIdx
- TLSH T13C837B23F6E288B1E0710ABD9D58A795947FFD622C38B49B36A45D0E0E7C1C0A85D7D3
- MD5 SHA1 SHA512 SSDEEP TLSH