Analysis
- user interaction
yes - max time kernel
78s - max time network
34s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/08/2026, 01:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
reboot_launcher.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target reboot_launcher.exe
- Size 212KB
- Sample260808-cbb7daxhka
- SHA256 d1f0c8a945ecd14859173a047a6d43a721babb6a800d3a3d1200e9424f5b2056
- MD5 47d2e57e14f0b49b3298bde869fe095a
- SHA1 7028ea00098df48134f843bb22ddefc38d0e0476
- SHA512 adf643e486559bcfdffdaa743c24adb0e510d7defca1653eab487d2aaf1faf257a8ab84ec94460c118255a6c415225efbbccbc0ab663e639cb00273e0cb380eb
- SSDEEP 3072:c15RMEnk2uWKmJ/G6hujG69mkN3xI7T4++2POyW4Q80Ulb7I3:cdMWk4pJ/G6hujG6t3w4L2PRuXU17I3
- TLSH T1FE247D27EA5550BED299853CC9435D85DB72BC8A4755ABCF07804EA70F63AD09F3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3840 MiniSearchHost.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\reboot_launcher.exe"C:\Users\Admin\AppData\Local\Temp\reboot_launcher.exe"1⤵PID:5132
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3840
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5248
-
C:\Users\Admin\AppData\Local\Temp\reboot_launcher.exe"C:\Users\Admin\AppData\Local\Temp\reboot_launcher.exe"1⤵PID:4796
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
- Size 19KB
- SHA256 fce6395edae90c458a11df3d4df5c15857471d876de4b90e9a07db55ed9f335d
- MD5 5c4a6b41299e9e218faaaca27d1c0de7
- SHA1 67b505d471e67b275069c2cf845b2a8c20e4c29f
- SHA512 20fe41a898340dedf193919db5ad3c75af9c12cb6eb393f12dc53a290831bf1f3ce356fe823518c0242faafdb0982c1c39e5fd7468d7d244ac68802fcd88e8fe
- SSDEEP 384:MJWJ/Vca12krtuVm+OglBOVjeQ8RJo6DghvjUSruWp5P1m59+GDa50bVyc/:Y+/VcWr7l8RJxDgNjUeuwa9+GDa50bVd
- TLSH T148923A743AF41365F3B29F749EF1A95A653AB8629C00DB5D0162028D0977D92CDB0F3B
- MD5 SHA1 SHA512 SSDEEP TLSH