Analysis
- max time kernel
150s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
- submitted
01/07/2026, 18:32
General
- Target TLauncher.exe
- Size 9.2MB
- Sample260701-w6sbmacv7p
- SHA256 a92a1dea42081672b52a60748064d443f4366f98e04a189fd3b56b24816f26d6
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\TLauncher.exe"2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2448-0-0x0000000000400000-0x0000000000420000-memory.dmp
memory/2628-3-0x00000267278D0000-0x0000026727B40000-memory.dmp
memory/2628-12-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-15-0x0000026727B40000-0x0000026727B50000-memory.dmp
memory/2628-17-0x0000026727B50000-0x0000026727B60000-memory.dmp
memory/2628-19-0x0000026727B60000-0x0000026727B70000-memory.dmp
memory/2628-22-0x0000026727B70000-0x0000026727B80000-memory.dmp
memory/2628-25-0x0000026727B80000-0x0000026727B90000-memory.dmp
memory/2628-29-0x0000026727B90000-0x0000026727BA0000-memory.dmp
memory/2628-31-0x0000026727BA0000-0x0000026727BB0000-memory.dmp
memory/2628-33-0x0000026727BB0000-0x0000026727BC0000-memory.dmp
memory/2628-35-0x00000267278D0000-0x0000026727B40000-memory.dmp
memory/2628-36-0x0000026727BC0000-0x0000026727BD0000-memory.dmp
memory/2628-39-0x0000026727BD0000-0x0000026727BE0000-memory.dmp
memory/2628-41-0x0000026727BE0000-0x0000026727BF0000-memory.dmp
memory/2628-40-0x0000026727B40000-0x0000026727B50000-memory.dmp
memory/2628-44-0x0000026727BF0000-0x0000026727C00000-memory.dmp
memory/2628-43-0x0000026727B50000-0x0000026727B60000-memory.dmp
memory/2628-46-0x0000026727B60000-0x0000026727B70000-memory.dmp
memory/2628-48-0x0000026727C00000-0x0000026727C10000-memory.dmp
memory/2628-51-0x0000026727C10000-0x0000026727C20000-memory.dmp
memory/2628-50-0x0000026727B70000-0x0000026727B80000-memory.dmp
memory/2628-56-0x0000026727C20000-0x0000026727C30000-memory.dmp
memory/2628-55-0x0000026727B80000-0x0000026727B90000-memory.dmp
memory/2628-58-0x0000026727C30000-0x0000026727C40000-memory.dmp
memory/2628-57-0x0000026727B90000-0x0000026727BA0000-memory.dmp
memory/2628-61-0x0000026727BA0000-0x0000026727BB0000-memory.dmp
memory/2628-62-0x0000026727C40000-0x0000026727C50000-memory.dmp
memory/2628-64-0x0000026727C50000-0x0000026727C60000-memory.dmp
memory/2628-63-0x0000026727BB0000-0x0000026727BC0000-memory.dmp
memory/2628-66-0x0000026727BC0000-0x0000026727BD0000-memory.dmp
memory/2628-67-0x0000026727C60000-0x0000026727C70000-memory.dmp
memory/2628-70-0x0000026727BD0000-0x0000026727BE0000-memory.dmp
memory/2628-72-0x0000026727BE0000-0x0000026727BF0000-memory.dmp
memory/2628-71-0x0000026727C70000-0x0000026727C80000-memory.dmp
memory/2628-73-0x0000026727C80000-0x0000026727C90000-memory.dmp
memory/2628-76-0x0000026727C90000-0x0000026727CA0000-memory.dmp
memory/2628-75-0x0000026727BF0000-0x0000026727C00000-memory.dmp
memory/2628-80-0x0000026727CA0000-0x0000026727CB0000-memory.dmp
memory/2628-81-0x0000026727C10000-0x0000026727C20000-memory.dmp
memory/2628-79-0x0000026727C00000-0x0000026727C10000-memory.dmp
memory/2628-82-0x0000026727CB0000-0x0000026727CC0000-memory.dmp
memory/2628-85-0x0000026727CC0000-0x0000026727CD0000-memory.dmp
memory/2628-84-0x0000026727C20000-0x0000026727C30000-memory.dmp
memory/2628-87-0x0000026727C30000-0x0000026727C40000-memory.dmp
memory/2628-88-0x0000026727CD0000-0x0000026727CE0000-memory.dmp
memory/2628-91-0x0000026727C40000-0x0000026727C50000-memory.dmp
memory/2628-92-0x0000026727CE0000-0x0000026727CF0000-memory.dmp
memory/2628-100-0x0000026727C70000-0x0000026727C80000-memory.dmp
memory/2628-96-0x0000026727C50000-0x0000026727C60000-memory.dmp
memory/2628-97-0x0000026727CF0000-0x0000026727D00000-memory.dmp
memory/2628-99-0x0000026727C60000-0x0000026727C70000-memory.dmp
memory/2628-98-0x0000026727D00000-0x0000026727D10000-memory.dmp
memory/2628-103-0x0000026727D10000-0x0000026727D20000-memory.dmp
memory/2628-102-0x0000026727C80000-0x0000026727C90000-memory.dmp
memory/2628-105-0x0000026727D20000-0x0000026727D30000-memory.dmp
memory/2628-109-0x0000026727D30000-0x0000026727D40000-memory.dmp
memory/2628-108-0x0000026727C90000-0x0000026727CA0000-memory.dmp
memory/2628-113-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-115-0x0000026727CA0000-0x0000026727CB0000-memory.dmp
memory/2628-116-0x0000026727D40000-0x0000026727D50000-memory.dmp
memory/2628-119-0x0000026727CB0000-0x0000026727CC0000-memory.dmp
memory/2628-120-0x0000026727D50000-0x0000026727D60000-memory.dmp
memory/2628-129-0x0000026727CC0000-0x0000026727CD0000-memory.dmp
memory/2628-130-0x0000026727D60000-0x0000026727D70000-memory.dmp
memory/2628-133-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-136-0x0000026727CD0000-0x0000026727CE0000-memory.dmp
memory/2628-137-0x0000026727D70000-0x0000026727D80000-memory.dmp
memory/2628-140-0x0000026727D80000-0x0000026727D90000-memory.dmp
memory/2628-139-0x0000026727CE0000-0x0000026727CF0000-memory.dmp
memory/2628-143-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-146-0x0000026727D90000-0x0000026727DA0000-memory.dmp
memory/2628-145-0x0000026727CF0000-0x0000026727D00000-memory.dmp
memory/2628-150-0x0000026727DA0000-0x0000026727DB0000-memory.dmp
memory/2628-149-0x0000026727D00000-0x0000026727D10000-memory.dmp
memory/2628-155-0x0000026727D10000-0x0000026727D20000-memory.dmp
memory/2628-156-0x0000026727DB0000-0x0000026727DC0000-memory.dmp
memory/2628-157-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-158-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-165-0x0000026727D20000-0x0000026727D30000-memory.dmp
memory/2628-166-0x0000026727DC0000-0x0000026727DD0000-memory.dmp
memory/2628-172-0x0000026727DD0000-0x0000026727DE0000-memory.dmp
memory/2628-171-0x0000026727D30000-0x0000026727D40000-memory.dmp
memory/2628-174-0x0000026727DE0000-0x0000026727DF0000-memory.dmp
memory/2628-173-0x0000026727D40000-0x0000026727D50000-memory.dmp
memory/2628-178-0x0000026727DF0000-0x0000026727E00000-memory.dmp
memory/2628-177-0x0000026727D50000-0x0000026727D60000-memory.dmp
memory/2628-180-0x0000026727E00000-0x0000026727E10000-memory.dmp
memory/2628-179-0x0000026727D60000-0x0000026727D70000-memory.dmp
memory/2628-183-0x0000026727E10000-0x0000026727E20000-memory.dmp
memory/2628-182-0x0000026727D70000-0x0000026727D80000-memory.dmp
memory/2628-185-0x0000026727D80000-0x0000026727D90000-memory.dmp
memory/2628-186-0x0000026727E20000-0x0000026727E30000-memory.dmp
memory/2628-189-0x0000026727E30000-0x0000026727E40000-memory.dmp
memory/2628-188-0x0000026727D90000-0x0000026727DA0000-memory.dmp
memory/2628-192-0x0000026727E40000-0x0000026727E50000-memory.dmp
memory/2628-191-0x0000026727DA0000-0x0000026727DB0000-memory.dmp
memory/2628-195-0x0000026727DB0000-0x0000026727DC0000-memory.dmp
memory/2628-196-0x0000026727E50000-0x0000026727E60000-memory.dmp
memory/2628-197-0x0000026727DC0000-0x0000026727DD0000-memory.dmp
memory/2628-199-0x0000026727E60000-0x0000026727E70000-memory.dmp
memory/2628-202-0x0000026727E70000-0x0000026727E80000-memory.dmp
memory/2628-201-0x0000026727DD0000-0x0000026727DE0000-memory.dmp
memory/2628-237-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-257-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-301-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-308-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-367-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-366-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-377-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-408-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-428-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-430-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-468-0x0000026725F10000-0x0000026725F11000-memory.dmp
memory/2628-469-0x0000026725F10000-0x0000026725F11000-memory.dmp