Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
03/07/2026, 12:18
General
- Target Launcher.cmd
- Size 28B
- Sample260703-pgr61agy8v
- SHA256 ce1e33483d353200a266b3bc383ccf500e5a760c6dcd8218747260f5bbe39509
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Launcher.cmd"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\luajit.exeluajit.exe uix.txt2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/956-53-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-51-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-50-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-49-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-48-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-46-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-45-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-44-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-43-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-42-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-41-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-40-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-36-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-35-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-34-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-32-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-30-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-31-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-29-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-28-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-27-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-25-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-58-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-26-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-24-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-22-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-21-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-19-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-18-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-16-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-15-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-14-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-13-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-12-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-11-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-10-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-9-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-8-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-7-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-6-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-5-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-4-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-3-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-2-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-52-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-47-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-39-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-37-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-38-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-33-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-23-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-20-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-17-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-1-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-0-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-64-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-70-0x0000027AAF920000-0x0000027AAF921000-memory.dmp
memory/956-73-0x0000027AAF930000-0x0000027AAF931000-memory.dmp
memory/956-69-0x0000027AAF920000-0x0000027AAF921000-memory.dmp
memory/956-63-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-62-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-60-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-59-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-56-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-57-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-55-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-54-0x00007FF7A61C0000-0x00007FF7A61D0000-memory.dmp
memory/956-104-0x0000027AAF920000-0x0000027AAF921000-memory.dmp
memory/956-105-0x0000027AAF930000-0x0000027AAF931000-memory.dmp