General
- Target Fix-NewLauncher.exe
- Size 945KB
- Sample260803-lh7fjawsdw
- SHA256 0fd7bb50eca207bb15a11925319395676f0897a47d2c0ee9921a264939a4a65a
- MD5 fdc6edd72adb3be55eef2e5ae0c3912e
- SHA1 05736155aaa11e5e13d95186e99489e5c077f534
- SHA512 64a9033b2358f7ab2b0797b1410e1b3277e706705b683247c467e8f3ead6c0a0e6a2f0898a964f8cbeb3db5eb0559338540e689c44e32e6d86e0c8bde2b3442e
- SSDEEP 12288:i22Mv3nAyV0EJi7eSwIOi36S6Y/PfL4ALx2vaOdaakVE6G:PhVF1IOiT6YHDFEHjkI
- TLSH T1B2256F142F979D01D54C163E9EBE1608D73264F223326B473B0FB6A14D45AEEED2C2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fix-NewLauncher.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Fix-NewLauncher.exe
- Size 945KB
- SHA256 0fd7bb50eca207bb15a11925319395676f0897a47d2c0ee9921a264939a4a65a
- MD5 fdc6edd72adb3be55eef2e5ae0c3912e
- SHA1 05736155aaa11e5e13d95186e99489e5c077f534
- SHA512 64a9033b2358f7ab2b0797b1410e1b3277e706705b683247c467e8f3ead6c0a0e6a2f0898a964f8cbeb3db5eb0559338540e689c44e32e6d86e0c8bde2b3442e
- SSDEEP 12288:i22Mv3nAyV0EJi7eSwIOi36S6Y/PfL4ALx2vaOdaakVE6G:PhVF1IOiT6YHDFEHjkI
- TLSH T1B2256F142F979D01D54C163E9EBE1608D73264F223326B473B0FB6A14D45AEEED2C2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Scheduled Task/Job
1Scheduled Task
1