Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 10:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Cheat.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cheat.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Launcher.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Launcher.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target Launcher.exe
- Size 84KB
- Sample260808-mzbkvsvgng
- SHA256 db1da8ec05e30b826ac8fac7bbf2449db0ff3d568c264e4969476a7f0deb15d3
- MD5 205771aa147d43487bb3255964a412b4
- SHA1 b1927865a425182c1fa492c9f5834b5abfd27b1b
- SHA512 6a8de1d9c2aa2d824464fc0063fa3fd2b5a069d64a317b431b4320380a0bd195434a4b73d880f8da94b5646b33a006a20c10d86683291b556a3498732e76d898
- SSDEEP 1536:KwKnhfBeqpoKl5xgbpMD7vgPJ7NhSPW0/lnpVlavnmU+V8usavwqt:enhfBes5eNG7vgPJ7NhSPWeE+F
- TLSH T140832B26EA2650BAC26AD9B8C6434904EF72FC464362B7CF57914DDA0F36AD45F3E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 448 cmd.exe - Suspicious behavior: EnumeratesProcesses 60 IoCs
pid Process 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe 4556 Launcher.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4556 wrote to memory of 448 4556 Launcher.exe 95