Analysis
- user interaction
yes - max time kernel
104s - max time network
101s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 00:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RiceLauncher.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
RiceLauncher.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target RiceLauncher.exe
- Size 278KB
- Sample260720-a645jac15z
- SHA256 e725f732c0a1f566e618489698974a505bdbd9781f9c3575c29a4f5f55921a30
- MD5 72779a8cf71a703b9b7f8208a991081a
- SHA1 b99dfa94d478ff0007a756c50cea078ceaf6b539
- SHA512 96760eb530f2924c975ca277573cb6cd01ffd4ef7f5328cc7a6f8760e81b097f11fbcb5384ec87c8c4212871433db761615d60c35a0eb9969965552c9334b037
- SSDEEP 6144:Fu6DsH6Mcc0OSsiOQACTzjM9JN/eCnR7YgV50DEri2b3T:Jy7iRVzEfeClqDCb3
- TLSH T195546B0B750A787ECA86C4B8934B5863592634CF0B72BCEF47C09A753C669B44F3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 api.ipify.org 11 api.ipify.org - Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer RiceLauncher.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName RiceLauncher.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 RiceLauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString RiceLauncher.exe