Analysis
- user interaction
yes - max time kernel
84s - max time network
85s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/08/2026, 07:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BR.Mods.Launcher.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
BR.Mods.Launcher.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target BR.Mods.Launcher.exe
- Size 318KB
- Sample260802-hsprpaxbld
- SHA256 6b58293f5829ee359613b4b5c548683fdf784634df4d30998fad37eafab94de2
- MD5 e9f25bfa9723fe9ef2fcdb3f950644b8
- SHA1 de73c565105032f4d05ee72d996d3ceb1e9d7e6f
- SHA512 45edbfee41534252d5fb9ee8c2eab6ba450579b4b64edabefa716f8b54dfc2a8d6b70e15e2351363465c97a62dc2a3bd101d05c022cb7ba0e42577fc60b54e31
- SSDEEP 6144:KqfB3fYvHN2t/yWmgWzwAHowdMZeiV83X9nSVe9:hBPYvQTAtdMZcX9n3
- TLSH T141648D48F2A454EDD01B5478815BF60FEA363C990350A9DB77E809683FE77E0EB7A211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3848 BR.Mods.Launcher.exe 3848 BR.Mods.Launcher.exe 1408 BR.Mods.Launcher.exe 1408 BR.Mods.Launcher.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1408 BR.Mods.Launcher.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\BR.Mods.Launcher.exe"C:\Users\Admin\AppData\Local\Temp\BR.Mods.Launcher.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3848
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2196
-
C:\Users\Admin\AppData\Local\Temp\BR.Mods.Launcher.exe"C:\Users\Admin\AppData\Local\Temp\BR.Mods.Launcher.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1408