Analysis
- user interaction
yes - max time kernel
15s - max time network
17s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
09/08/2026, 14:01
General
- Target HexiumLauncher.exe
- Size 66.1MB
- Sample260809-rbvfaastd1
- SHA256 b5dba50a61a27bbbf391aa6c132cc6c2a07a5efea7cef668aff0a0510f673a5c
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Suspicious behavior: EnumeratesProcesses 10 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HexiumLauncher.exe"C:\Users\Admin\AppData\Local\Temp\HexiumLauncher.exe"1⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4776-5-0x0000000180000000-0x0000000180A25000-memory.dmp
memory/4776-10-0x0000015EB4610000-0x0000015EB52C1000-memory.dmp
memory/4776-20-0x0000015EB2DC0000-0x0000015EB2DE0000-memory.dmp
memory/4776-37-0x0000015EB3400000-0x0000015EB3440000-memory.dmp
memory/4776-43-0x0000015EB3650000-0x0000015EB368E000-memory.dmp
memory/4776-40-0x0000015EB3530000-0x0000015EB3577000-memory.dmp
memory/4776-34-0x0000015EB3450000-0x0000015EB3471000-memory.dmp
memory/4776-29-0x0000015EB2E00000-0x0000015EB2E13000-memory.dmp
memory/4776-26-0x0000015EB3750000-0x0000015EB384E000-memory.dmp
memory/4776-17-0x0000015EB14C0000-0x0000015EB14CD000-memory.dmp
memory/4776-12-0x0000015EB3580000-0x0000015EB3641000-memory.dmp
memory/4776-23-0x0000015EB2DE0000-0x0000015EB2DF8000-memory.dmp
memory/4776-14-0x0000015EB14E0000-0x0000015EB14F2000-memory.dmp
memory/4776-46-0x0000015EB2E20000-0x0000015EB2E27000-memory.dmp
memory/4776-52-0x0000015EB36B0000-0x0000015EB36C6000-memory.dmp
memory/4776-49-0x0000015EB3490000-0x0000015EB349A000-memory.dmp
memory/4776-55-0x0000015EB40C0000-0x0000015EB40D6000-memory.dmp
memory/4776-58-0x0000015EB40F0000-0x0000015EB4109000-memory.dmp
memory/4776-61-0x0000015ED74F0000-0x0000015ED75A5000-memory.dmp
memory/4776-64-0x0000015EB45E0000-0x0000015EB460A000-memory.dmp
memory/4776-70-0x0000015ED7440000-0x0000015ED7474000-memory.dmp
memory/4776-73-0x0000015ED75B0000-0x0000015ED771A000-memory.dmp
memory/4776-67-0x0000015ED7770000-0x0000015ED7928000-memory.dmp
memory/4776-76-0x0000015ED7480000-0x0000015ED74DC000-memory.dmp
memory/4776-83-0x0000015ED7A90000-0x0000015ED7B1A000-memory.dmp
memory/4776-79-0x0000015ED79E0000-0x0000015ED7A87000-memory.dmp
memory/4776-85-0x0000015ED7720000-0x0000015ED775C000-memory.dmp
memory/4776-91-0x0000015ED7410000-0x0000015ED7429000-memory.dmp
memory/4776-88-0x0000015ED7930000-0x0000015ED79AC000-memory.dmp
memory/4776-94-0x0000015ED79B0000-0x0000015ED79D1000-memory.dmp
memory/4776-100-0x0000015ED7B20000-0x0000015ED7B37000-memory.dmp
memory/4776-98-0x0000015ED7B70000-0x0000015ED7B95000-memory.dmp
memory/4776-103-0x0000015ED7BD0000-0x0000015ED7BE7000-memory.dmp
memory/4776-109-0x0000015ED7C10000-0x0000015ED7C16000-memory.dmp
memory/4776-106-0x0000015ED7BF0000-0x0000015ED7C10000-memory.dmp
memory/4776-112-0x0000015ED9400000-0x0000015ED94C4000-memory.dmp
memory/4776-115-0x0000015ED7C40000-0x0000015ED7C45000-memory.dmp
memory/4776-118-0x0000015ED7CA0000-0x0000015ED7CC9000-memory.dmp
memory/4776-121-0x0000015ED7C50000-0x0000015ED7C5F000-memory.dmp
memory/4776-124-0x0000015ED7D30000-0x0000015ED7D85000-memory.dmp
memory/4776-127-0x0000015ED7C60000-0x0000015ED7C69000-memory.dmp