Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
02/08/2026, 04:41
General
- Target Rockstar-Games-Launcher.exe
- Size 93.3MB
- Sample260802-fa747svcre
- SHA256 1fda8f1674b9689dcbd949babb7d767d13a636e639cd4bea17aeb0efecd1882d
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Rockstar-Games-Launcher.exe"C:\Users\Admin\AppData\Local\Temp\Rockstar-Games-Launcher.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4612-0-0x0000016058412000-0x0000016058413000-memory.dmp
memory/4612-1-0x0000016058410000-0x0000016058411000-memory.dmp
memory/4612-3-0x0000016058414000-0x0000016058415000-memory.dmp
memory/4612-2-0x0000016058413000-0x0000016058414000-memory.dmp
memory/4612-14-0x0000016058411000-0x0000016058412000-memory.dmp
memory/4612-17-0x0000016058418000-0x000001605841A000-memory.dmp
memory/4612-16-0x0000016058416000-0x0000016058417000-memory.dmp
memory/4612-15-0x0000016058417000-0x0000016058418000-memory.dmp
memory/4612-13-0x0000016058415000-0x0000016058416000-memory.dmp
memory/4612-27-0x000001605841B000-0x000001605841C000-memory.dmp
memory/4612-26-0x000001605841C000-0x000001605841D000-memory.dmp
memory/4612-25-0x000001609840E000-0x000001609840F000-memory.dmp
memory/4612-24-0x000001609840D000-0x000001609840E000-memory.dmp
memory/4612-23-0x000001605841A000-0x000001605841B000-memory.dmp
memory/4612-48-0x0000016058422000-0x0000016058423000-memory.dmp
memory/4612-43-0x000001605841D000-0x000001605841E000-memory.dmp
memory/4612-42-0x000001605841E000-0x000001605841F000-memory.dmp
memory/4612-47-0x0000016058421000-0x0000016058422000-memory.dmp
memory/4612-46-0x000001605841F000-0x0000016058420000-memory.dmp
memory/4612-50-0x0000016058423000-0x0000016058424000-memory.dmp
memory/4612-49-0x0000016058414000-0x0000016058415000-memory.dmp
memory/4612-45-0x0000016058420000-0x0000016058421000-memory.dmp
memory/4612-44-0x0000016058412000-0x0000016058413000-memory.dmp
memory/4612-52-0x0000016058425000-0x0000016058426000-memory.dmp
memory/4612-51-0x0000016058424000-0x0000016058425000-memory.dmp
memory/4612-54-0x0000016058427000-0x0000016058428000-memory.dmp
memory/4612-53-0x000001600A000000-0x000001600B000000-memory.dmp
memory/4612-55-0x000001600A000000-0x000001600B000000-memory.dmp
memory/4612-77-0x0000016058432000-0x0000016058433000-memory.dmp
memory/4612-78-0x0000016058433000-0x0000016058434000-memory.dmp
memory/4612-75-0x0000016058430000-0x0000016058431000-memory.dmp
memory/4612-79-0x000001600A000000-0x000001600B000000-memory.dmp
memory/4612-74-0x000001605842F000-0x0000016058430000-memory.dmp
memory/4612-80-0x000001600A000000-0x000001600B000000-memory.dmp
memory/4612-73-0x000001605842E000-0x000001605842F000-memory.dmp
memory/4612-72-0x000001605842D000-0x000001605842E000-memory.dmp
memory/4612-71-0x000001605842B000-0x000001605842D000-memory.dmp
memory/4612-69-0x0000016058429000-0x000001605842A000-memory.dmp
memory/4612-68-0x0000016058428000-0x0000016058429000-memory.dmp
memory/4612-67-0x000001600A000000-0x000001600B000000-memory.dmp
memory/4612-76-0x0000016058431000-0x0000016058432000-memory.dmp
memory/4612-70-0x000001605842A000-0x000001605842B000-memory.dmp