Overview

overview

9

Static

static

3

AstroLauncher.exe

windows10-2004-x64

9

AstroLauncher.pyc

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    AstroLauncher.exe
  • Size 11.8MB
  • Sample260731-xb231syflc
  • SHA256 01c571385ecce68de2ce9cad48c10b2f32febe917a70c93dc49e4d7943c64501
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryexecutionpyinstallerransomwarespywaretrojan

Malware Config

Targets

    • Target
      AstroLauncher.exe
    • Size 11.8MB
    • SHA256 01c571385ecce68de2ce9cad48c10b2f32febe917a70c93dc49e4d7943c64501
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasiondiscoveryexecutionransomwarespywaretrojan

    • Renames multiple (105) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1
    • Target
      AstroLauncher.pyc
    • Size 57KB
    • SHA256 7ac5aa7a5345eb37ec653f6889217a8919b5510c0f5d6752a9e3ee9a427a992f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks