Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/07/2026, 01:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
General
- Target Launcher.exe
- Size 303KB
- Sample260706-bxbbjacx6m
- SHA256 f34ea9c6d9330527426e9aad4b1934960fd9f7e862a6764cf1d10e68f8ffc45b
- MD5 6017195b44c384cfba0b2bc0f8e71a51
- SHA1 4beb311de9ad4e41944eb09f5b70d60ec4c1fb98
- SHA512 5f427ef7d1de647181221e6209bd3e625eb4aa4656c11e3fa3c9b97a6452e5a0cb3e15b2c73b2fe3e8d75aee19ff10e74e670de8affe98b18ea6f4f2ce921f6b
- SSDEEP 6144:1AwTB4bnwL0hn4xck5mw8Soc/or5MSX4j/zAGEvJxOyVn:uSV8Socm5Hoj/zA
- TLSH T185648D16E79511FDE5ABC17CCE828805EB727C4607B0DACF179049A62F636E09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 1040 netcfg_66928ff2.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1040 netcfg_66928ff2.exe 1040 netcfg_66928ff2.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 1548 wrote to memory of 1040 1548 Launcher.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\Launcher.exe"C:\Users\Admin\AppData\Local\Temp\Launcher.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1548 -
C:\Users\Admin\AppData\Local\Temp\netcfg_66928ff2.exe"C:\Users\Admin\AppData\Local\Temp\netcfg_66928ff2.exe"2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:1040
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\netcfg_66928ff2.exe
- Size 303KB
- SHA256 f34ea9c6d9330527426e9aad4b1934960fd9f7e862a6764cf1d10e68f8ffc45b
- MD5 6017195b44c384cfba0b2bc0f8e71a51
- SHA1 4beb311de9ad4e41944eb09f5b70d60ec4c1fb98
- SHA512 5f427ef7d1de647181221e6209bd3e625eb4aa4656c11e3fa3c9b97a6452e5a0cb3e15b2c73b2fe3e8d75aee19ff10e74e670de8affe98b18ea6f4f2ce921f6b
- SSDEEP 6144:1AwTB4bnwL0hn4xck5mw8Soc/or5MSX4j/zAGEvJxOyVn:uSV8Socm5Hoj/zA
- TLSH T185648D16E79511FDE5ABC17CCE828805EB727C4607B0DACF179049A62F636E09E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH