General
- Target ProfitStarsDeviceControlLauncher_5.10.9475.26330.exe
- Size 18.0MB
- Sample260811-ws2cdayapc
- SHA256 be14927734e93145a58b75e8f08f0b7859b564f391eaf2a38c8009df35a5b74a
- MD5 c0e731354e06a00fffce096a0af82f0f
- SHA1 167fe5b63543bb99b3a020e2847d921ed891393b
- SHA512 7393a0783cc234d4a7817f4691e185f2dc2e6db11bb806bf9edd426c6a05fc79f6f7e1c29f0ff02cc91efefa93ce8d048f4b12f47dc1b62b5abab6d347a26ff3
- SSDEEP 393216:SWf2Rwsjw/366awJk7TpTMIahJ3larp03/h36uVVvGKGZAtRycFwP:Sn+sjw/nk7TpTMlVarypKubvGKGZAtRK
- TLSH T14917333398615232EBF10473B42496303D6CE3241B5199AAE3C4FD2D6E394D1A6FB76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ProfitStarsDeviceControlLauncher_5.10.9475.26330.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ProfitStarsDeviceControlLauncher_5.10.9475.26330.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target ProfitStarsDeviceControlLauncher_5.10.9475.26330.exe
- Size 18.0MB
- SHA256 be14927734e93145a58b75e8f08f0b7859b564f391eaf2a38c8009df35a5b74a
- MD5 c0e731354e06a00fffce096a0af82f0f
- SHA1 167fe5b63543bb99b3a020e2847d921ed891393b
- SHA512 7393a0783cc234d4a7817f4691e185f2dc2e6db11bb806bf9edd426c6a05fc79f6f7e1c29f0ff02cc91efefa93ce8d048f4b12f47dc1b62b5abab6d347a26ff3
- SSDEEP 393216:SWf2Rwsjw/366awJk7TpTMIahJ3larp03/h36uVVvGKGZAtRycFwP:Sn+sjw/nk7TpTMlVarypKubvGKGZAtRK
- TLSH T14917333398615232EBF10473B42496303D6CE3241B5199AAE3C4FD2D6E394D1A6FB76B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2