General
- Target justice-launcher-setup.exe
- Size 84.1MB
- Sample260723-m2sl6a1taz
- SHA256 b7c29018bc92aaf152902b443ff0bff3fadca5138f53e7ef3304e0c4541c64fa
- MD5 d1594364c6ca7a16c1eab05d232ee9c8
- SHA1 a7a4a6c1d6133096ca80e26ff16344c7b85f5c7d
- SHA512 c5b3fa2e41167f74fcc0bf70b653dd04cb0d0d565872206ba019406ccd2139a658a19649504ee9b7081de70fad32a6e0ffd993bffa079e05831bad0a8b6a7be7
- SSDEEP 1572864:oE0Eew0XuYuQtznURi+/7+oGF+wIylz9d9vY+/2PlfbKcw9JdZn3tRkhauB7lYhT:ovw0uWtkT//wBlRdpv2PBWl9JdZntuBq
- TLSH T1E31833C075B6DE88C6EAE1F18976E767AE0286B3B04FBD3121B4D1B01CBD480C56D5B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
justice-launcher-setup.exe
Resource
win10v2004-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
justice-launcher-setup.exe
Resource
win11ltsc2024-20260709-en
25 signatures
900 seconds
Malware Config
Targets
-
- Target justice-launcher-setup.exe
- Size 84.1MB
- SHA256 b7c29018bc92aaf152902b443ff0bff3fadca5138f53e7ef3304e0c4541c64fa
- MD5 d1594364c6ca7a16c1eab05d232ee9c8
- SHA1 a7a4a6c1d6133096ca80e26ff16344c7b85f5c7d
- SHA512 c5b3fa2e41167f74fcc0bf70b653dd04cb0d0d565872206ba019406ccd2139a658a19649504ee9b7081de70fad32a6e0ffd993bffa079e05831bad0a8b6a7be7
- SSDEEP 1572864:oE0Eew0XuYuQtznURi+/7+oGF+wIylz9d9vY+/2PlfbKcw9JdZn3tRkhauB7lYhT:ovw0uWtkT//wBlRdpv2PBWl9JdZntuBq
- TLSH T1E31833C075B6DE88C6EAE1F18976E767AE0286B3B04FBD3121B4D1B01CBD480C56D5B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.