General
- Target HexagonPlayerLauncher.exe
- Size 1.6MB
- Sample260727-xbebysck2w
- SHA256 4e66d9fefb95ac309be7349eb4256b89f03fc59a59785818d9e1c42fb22614c0
- MD5 725e733b5bb9cb271aa17ea4fb370b74
- SHA1 ccd720c9ca577750dd71e4195564ab914445aa3c
- SHA512 2c099ee096a34b41722e8efce2068aa5056c5823322027e24f4d1ac949d73c34d218d463fc82dfe8ee2ff0124f0fa8eab5ca24c1d4a38e1fa6cc9d3bddb18d36
- SSDEEP 49152:bRTZB9WgJSTSKSosEfOcQI3W67CoqheM:nB8TSjo
- TLSH T1D1757C52BE4F98F1C1A101F0952597B985BF2D60772285C753843BD85A30EC3B73AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HexagonPlayerLauncher.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target HexagonPlayerLauncher.exe
- Size 1.6MB
- SHA256 4e66d9fefb95ac309be7349eb4256b89f03fc59a59785818d9e1c42fb22614c0
- MD5 725e733b5bb9cb271aa17ea4fb370b74
- SHA1 ccd720c9ca577750dd71e4195564ab914445aa3c
- SHA512 2c099ee096a34b41722e8efce2068aa5056c5823322027e24f4d1ac949d73c34d218d463fc82dfe8ee2ff0124f0fa8eab5ca24c1d4a38e1fa6cc9d3bddb18d36
- SSDEEP 49152:bRTZB9WgJSTSKSosEfOcQI3W67CoqheM:nB8TSjo
- TLSH T1D1757C52BE4F98F1C1A101F0952597B985BF2D60772285C753843BD85A30EC3B73AEAE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1