General
- Target HubLauncher.exe
- Size 11.0MB
- Sample260808-y2kgbsdk4s
- SHA256 983e8736310230492d31b7ba414021a0f6fee39cd70bc124302d899cdc9c4cdd
- MD5 57fa6b5e352fdf5bc51f0145809a45c1
- SHA1 df7231df85c199c16b9f183ecbac4c2679e61123
- SHA512 27ccbc06ed1b60b182c1ff53a29aeb0149d576abb701d985777c09bfe0d0c6143fe448a5ac1f53cbc4561800c8e858608c0c968249416600b6ae785d8519af63
- SSDEEP 196608:zoRTYgNNWjM1NSqaL62SVqDGonH+F2EahbewiUWmSF5+cs5mXtb8q:zsTP8jM1NSqaLPeXO1bUeU45mxV
- TLSH T101C633ACA69A88ECED8F423181A81654CB7C012293F4B7EF1575D6848C4DBE6CD13D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
HubLauncher.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
HubLauncher.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target HubLauncher.exe
- Size 11.0MB
- SHA256 983e8736310230492d31b7ba414021a0f6fee39cd70bc124302d899cdc9c4cdd
- MD5 57fa6b5e352fdf5bc51f0145809a45c1
- SHA1 df7231df85c199c16b9f183ecbac4c2679e61123
- SHA512 27ccbc06ed1b60b182c1ff53a29aeb0149d576abb701d985777c09bfe0d0c6143fe448a5ac1f53cbc4561800c8e858608c0c968249416600b6ae785d8519af63
- SSDEEP 196608:zoRTYgNNWjM1NSqaL62SVqDGonH+F2EahbewiUWmSF5+cs5mXtb8q:zsTP8jM1NSqaLPeXO1bUeU45mxV
- TLSH T101C633ACA69A88ECED8F423181A81654CB7C012293F4B7EF1575D6848C4DBE6CD13D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.