General
- Target Launcher.exe
- Size 12.1MB
- Sample260805-jfddkaxxc1
- SHA256 dffffa8442eee459011ec6bb867865b4362b814c7822a52f87585c84d01edaf6
- MD5 9b925442ae3e45f56e73f31f7614c373
- SHA1 a5f064c07d473dbc061a96a3cec6f076f84e2f56
- SHA512 7667e41b0638b9ec5d0d6956cb3d8deb02815a502dfbc48e5d0b3512ecdcafc4c97059aff00dd99ab435fb0a48618fd018f8b222f3190da896811058e67efa56
- SSDEEP 196608:uCS6G1g7nwbLrNxuHHW91t09t/LTgpVorqw85AjU34/POeR:uCxGG7wXBxuHHq8X/LTgPlRAsGOeR
- TLSH T118D6331A4DA80AD2F0EA82BDC9125650F77278B74B70A3DB1B50D4192F133EC9D7A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
Launcher.exe
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
Launcher.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Launcher.exe
- Size 12.1MB
- SHA256 dffffa8442eee459011ec6bb867865b4362b814c7822a52f87585c84d01edaf6
- MD5 9b925442ae3e45f56e73f31f7614c373
- SHA1 a5f064c07d473dbc061a96a3cec6f076f84e2f56
- SHA512 7667e41b0638b9ec5d0d6956cb3d8deb02815a502dfbc48e5d0b3512ecdcafc4c97059aff00dd99ab435fb0a48618fd018f8b222f3190da896811058e67efa56
- SSDEEP 196608:uCS6G1g7nwbLrNxuHHW91t09t/LTgpVorqw85AjU34/POeR:uCxGG7wXBxuHHq8X/LTgPlRAsGOeR
- TLSH T118D6331A4DA80AD2F0EA82BDC9125650F77278B74B70A3DB1B50D4192F133EC9D7A763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1