Overview

overview

7

Static

static

3

BSMSO.Launcher.exe

windows10-2004-x64

7

BSMSO.Launcher.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/07/2026, 23:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BSMSO.Launcher.exe
  • Size 155.2MB
  • Sample260727-3tk54sdh33
  • SHA256 7ff38d786939faa9c0552e4bb27da35b43e71c213ff5fae11af0e46e50c57789
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BSMSO.Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\BSMSO.Launcher.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:4304
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5384,i,7754485121243952016,7171751463793635472,524288 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5336 /prefetch:8
    1⤵
      PID:1860
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
      1⤵
        PID:4284
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --metrics-shmem-handle=5552,i,4131246034888479895,12902673110517102800,2097152 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5400 /prefetch:1
        1⤵
          PID:4936
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3332,i,13939008242316221289,15241500479697379974,524288 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3668 /prefetch:8
          1⤵
            PID:3520
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3320,i,3694361501875229864,18271597904050109559,524288 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3664 /prefetch:8
            1⤵
              PID:3396
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=2820,i,2078373495082240462,17430597803606618883,524288 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5684 /prefetch:8
              1⤵
                PID:3452
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --metrics-shmem-handle=5796,i,15012549602779494578,12366538690009195923,2097152 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3660 /prefetch:1
                1⤵
                  PID:984
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --metrics-shmem-handle=4548,i,1677020491593899820,9885503269614864888,2097152 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3372 /prefetch:1
                  1⤵
                    PID:4400
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3692,i,15347148431860072952,12502907180359095659,262144 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5964 /prefetch:8
                    1⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:652
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --metrics-shmem-handle=6056,i,11055576727038635971,14220022212055244582,2097152 --field-trial-handle=2020,i,17786004511640163725,13871632478675078921,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6060 /prefetch:1
                    1⤵
                      PID:3496

                    Network

                          MITRE ATT&CK Enterprise v16

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          D3DCompiler_47_cor3.dll
                          • Path C:\Users\Admin\AppData\Local\Temp\.net\BSMSO.Launcher\taXoXGritnJIMKxblzE+ei16hzkh1ws=\D3DCompiler_47_cor3.dll
                          • Size 4.5MB
                          • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          PresentationNative_cor3.dll
                          • Path C:\Users\Admin\AppData\Local\Temp\.net\BSMSO.Launcher\taXoXGritnJIMKxblzE+ei16hzkh1ws=\PresentationNative_cor3.dll
                          • Size 1.2MB
                          • SHA256 67629b6aaee39328d02b11e5d85a53b35aa6cea71d4d37a671295a76c02b240e
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download

                          wpfgfx_cor3.dll
                          • Path C:\Users\Admin\AppData\Local\Temp\.net\BSMSO.Launcher\taXoXGritnJIMKxblzE+ei16hzkh1ws=\wpfgfx_cor3.dll
                          • Size 1.9MB
                          • SHA256 1c1c5d5ae7530615585b77a8b15588ed51ea66da9a75fceeea7f772970edc01f
                          • MD5 SHA1 SHA512 SSDEEP TLSH
                          Submit Download