Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 14:01

General

  • Target
    HexiumLauncher.exe
  • Size 66.1MB
  • Sample260809-rbvfaastd1
  • SHA256 b5dba50a61a27bbbf391aa6c132cc6c2a07a5efea7cef668aff0a0510f673a5c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HexiumLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\HexiumLauncher.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4488

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4488-5-0x0000000180000000-0x0000000180A25000-memory.dmp

        memory/4488-11-0x0000025AC17C0000-0x0000025AC1881000-memory.dmp

        memory/4488-8-0x0000025AC2920000-0x0000025AC35D1000-memory.dmp

        memory/4488-49-0x0000025AC1660000-0x0000025AC166A000-memory.dmp

        memory/4488-52-0x0000025AC2700000-0x0000025AC2716000-memory.dmp

        memory/4488-26-0x0000025AC1890000-0x0000025AC198E000-memory.dmp

        memory/4488-46-0x0000025AA0F10000-0x0000025AA0F17000-memory.dmp

        memory/4488-44-0x0000025AC1770000-0x0000025AC17AE000-memory.dmp

        memory/4488-40-0x0000025AC1720000-0x0000025AC1767000-memory.dmp

        memory/4488-37-0x0000025AC1620000-0x0000025AC1660000-memory.dmp

        memory/4488-29-0x0000025AA0EF0000-0x0000025AA0F03000-memory.dmp

        memory/4488-23-0x0000025AA0ED0000-0x0000025AA0EE8000-memory.dmp

        memory/4488-34-0x0000025AC1670000-0x0000025AC1691000-memory.dmp

        memory/4488-17-0x0000025AA0E50000-0x0000025AA0E5D000-memory.dmp

        memory/4488-20-0x0000025AA0EB0000-0x0000025AA0ED0000-memory.dmp

        memory/4488-14-0x0000025AA0E80000-0x0000025AA0E92000-memory.dmp

        memory/4488-55-0x0000025AC6950000-0x0000025AC6966000-memory.dmp

        memory/4488-58-0x0000025AC6980000-0x0000025AC6999000-memory.dmp

        memory/4488-63-0x0000025AC7330000-0x0000025AC73E5000-memory.dmp

        memory/4488-64-0x0000025AC72A0000-0x0000025AC72CA000-memory.dmp

        memory/4488-67-0x0000025AC89F0000-0x0000025AC8BA8000-memory.dmp

        memory/4488-70-0x0000025AC7250000-0x0000025AC7284000-memory.dmp

        memory/4488-73-0x0000025AC8BB0000-0x0000025AC8D1A000-memory.dmp

        memory/4488-76-0x0000025AC87F0000-0x0000025AC884C000-memory.dmp

        memory/4488-79-0x0000025AC8900000-0x0000025AC89A7000-memory.dmp

        memory/4488-82-0x0000025AC8760000-0x0000025AC87EA000-memory.dmp

        memory/4488-85-0x0000025AC88C0000-0x0000025AC88FC000-memory.dmp

        memory/4488-91-0x0000025AC7300000-0x0000025AC7319000-memory.dmp

        memory/4488-88-0x0000025AC8DA0000-0x0000025AC8E1C000-memory.dmp

        memory/4488-101-0x0000025AC8860000-0x0000025AC8877000-memory.dmp

        memory/4488-97-0x0000025AC8D20000-0x0000025AC8D45000-memory.dmp

        memory/4488-94-0x0000025AC89B0000-0x0000025AC89D1000-memory.dmp

        memory/4488-103-0x0000025AC8D80000-0x0000025AC8D97000-memory.dmp

        memory/4488-106-0x0000025AC8E20000-0x0000025AC8E40000-memory.dmp

        memory/4488-109-0x0000025AC8E40000-0x0000025AC8E46000-memory.dmp

        memory/4488-114-0x0000025AC8FB0000-0x0000025AC9074000-memory.dmp

        memory/4488-115-0x0000025AC8E70000-0x0000025AC8E75000-memory.dmp

        memory/4488-121-0x0000025AC8E80000-0x0000025AC8E8F000-memory.dmp

        memory/4488-118-0x0000025AC8ED0000-0x0000025AC8EF9000-memory.dmp

        memory/4488-124-0x0000025AC9080000-0x0000025AC90D5000-memory.dmp

        memory/4488-127-0x0000025AC8E90000-0x0000025AC8E99000-memory.dmp