General
- Target launcher.exe
- Size 42.0MB
- Sample260624-rsclsscy4v
- SHA256 2c5dea49aab6cdb2d750e0d7cb4fca78edfe277e38a5c8e385211e1731d6fee7
- MD5 74977cadf43cbe3c8d8097829aaf4132
- SHA1 d8ed344ebf9a4f1dd14f87b7680c9d806f22e77f
- SHA512 0ab9992a1bff77908ee1b5adaef33447e1b99f8f7013836cfe99a1fc3c23bce191589f5160e80c67db5d16979613ef34a14a1e7037330663216de539fc42e556
- SSDEEP 786432:50LoCOn+2ts4urYDNulLBiu0HQMItwICzgp2Wwj9LZWZ:5MoCm/tXwmHQMI2IC+QLZM
- TLSH T1BAA79C0772E60195E8B7D2388AA75103D773B8634731CADF316D06152FBBAD0AA7B721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
launcher.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
launcher.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target launcher.exe
- Size 42.0MB
- SHA256 2c5dea49aab6cdb2d750e0d7cb4fca78edfe277e38a5c8e385211e1731d6fee7
- MD5 74977cadf43cbe3c8d8097829aaf4132
- SHA1 d8ed344ebf9a4f1dd14f87b7680c9d806f22e77f
- SHA512 0ab9992a1bff77908ee1b5adaef33447e1b99f8f7013836cfe99a1fc3c23bce191589f5160e80c67db5d16979613ef34a14a1e7037330663216de539fc42e556
- SSDEEP 786432:50LoCOn+2ts4urYDNulLBiu0HQMItwICzgp2Wwj9LZWZ:5MoCm/tXwmHQMI2IC+QLZM
- TLSH T1BAA79C0772E60195E8B7D2388AA75103D773B8634731CADF316D06152FBBAD0AA7B721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist