a79e78fea90fde56f81685cdee7302d30f708a5ff41120f6e8c215ac4bf6a66c

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 17:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MU-Ascension-Launcher.exe
Size 165KB
Sample260816-vvlt2atsd1
SHA256 a79e78fea90fde56f81685cdee7302d30f708a5ff41120f6e8c215ac4bf6a66c
MD5 6993ce41d3719591638c1ff04ed04432
SHA1 d797bf4f3501533ee77dd217ee38608b1fdd6d8c
SHA512 6461b1f7febfdbb120fa9cb278316f624e968be3ce9dbb5ad983b29e3d5b5de2d01c86a6ca416b9d86aa4a94c8693b0be17e074d798ceda3be13a2795f0af3d5
SSDEEP 3072:BFVi0RKvby04QMfdoRM3Z6UAetZWO0K9ZRDlWWsudj2Kvp09B1w7cac4FyWfz7:ByvGfDZ6UAL4TLlFCaywCsy
TLSH
T152F3028073ECED36F2FEAFBCB126044017B1E8351D66E3595CC5E9EA6DA4B808190763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file 2 IoCs

flow	pid	Process
2	2040	MU-Ascension-Launcher.exe
2	2040	MU-Ascension-Launcher.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2040	MU-Ascension-Launcher.exe

C:\Users\Admin\AppData\Local\Temp\MU-Ascension-Launcher.exe
"C:\Users\Admin\AppData\Local\Temp\MU-Ascension-Launcher.exe"
1⤵
- Downloads MZ/PE file
- Suspicious use of AdjustPrivilegeToken
PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

shiny05.OZJ.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Effect\cherryblossom\shiny05.OZJ.descargando
Size 14KB
SHA256 d2db80b13b85026c144599f4af7cd91a5fe346804aeb84905afac6eaa0d6fea0
MD5 6a7a30123e2f211a250ded6e79e7c9d6
SHA1 58f2561ee0bf00e6689768b89f39d0ae3efc6064
SHA512 0c55b1c6f6435847d719dcbce47ba0e03dc9af8a3f6dc78facd77ac4f899cd9c33071e8071e91fead666b4e5be62b4f022f1363c861b707be3038f2e1e981fca
SSDEEP 192:4qUMXtYadUMXBrnzcaAjz1fRNYNMtKwYpHhNWjvE1Rm:4jMXiMXB7zcaAjz1fRNYNg7YJCjMc
TLSH
T1ED624C19AB23EFA1E4D252305CF6D747B263AF16AA635B82359C75027F70BC10E4D287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

magic_ground3.OZJ.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Effect\magic_ground3.OZJ.descargando
Size 10KB
SHA256 3d62346d751e068044c34ea11dc716d130d871bb7608ac1c490ed37f781f0e68
MD5 68b55e64fc4c40b940ed0caa9ca11a77
SHA1 98f37d7d81885e91a5d5b90242bbf980dc4df868
SHA512 a6464610f2a234ea5e644a31d7197bd75a11a205f474ffcd3aab065823a631823ff5d0e86832697f119dbf7cdf8a2756a6fc92a87f35d11b5edcfc72e97792da
SSDEEP 96:aN/jC7mvQhOPhsPo7WTC7m0crnBt6Od1GaN23zjlsin5PiwtqtkxaOey0VCYZ5Kl:I7GOa1TlrnD0agjz1rvjD0fKt7
TLSH
T14132A415BB13AE51D9E9227118E7D28B9233DF06B9A31946748D6943BF70FD20D2E343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

monolines.OZJ.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Effect\monolines.OZJ.descargando
Size 14KB
SHA256 7981e9ec00f0ccc30826ee52d0cbe4028159516c2c176f490e3feb6db776df9f
MD5 bcf326f41d7f857e482cae72caaf5808
SHA1 e148cb89a9de70d09dc76f9d18adb6844023f598
SHA512 b693136e25b4c1275fd811362626b5499b221c48949723a43d77dc75a0527c7e4926cc86964cab7d8595f13e3e130b3ca30d293bcb579e6cb5a8b90e39bb6b09
SSDEEP 192:ERfW76nfWyrn/bi6fa3Qjz195hYFNYNMtKw0UfK2I08o:Ex7D1aAjz1nqNYNg70Uybo
TLSH
T184521A257F13BF61E8E196305CF6E78592129F0AA7635E42746C3A12BF60BC11E1E243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

motion_blur_t.OZJ.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Effect\motion_blur_t.OZJ.descargando
Size 8KB
SHA256 934716e4c09ebca25b43e62bc1f6b69b26663fa54306f5054fa12a354b6dc5af
MD5 da46271717846f4eb99f7395e33adba7
SHA1 e6d3d2c31336310e07130d8f99fc89e5c496aea1
SHA512 134aaeb6acaf09e8a65a153bd721961d994679e016b7d7a4bc667735ae202d3f2e047b667df3f121da6e8073c845ab997925dd9c3131a42104268c4269414176
SSDEEP 192:8gggCkYNMtKwYSlqecV7Ab5/YfEEKjwLALTZve:vukYNg7YKqB7ABYfEE0mYU
TLSH
T194027E67B7A39E73DCE1863065B1EBF57350BF28E323267624683B12F5753C28804165
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mzine_typer3.OZJ.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Effect\mzine_typer3.OZJ.descargando
Size 76KB
SHA256 f343b1f09b6d9eecf2b03920e2b66880a19f24e850518b89e6914f8956015cf6
MD5 3b5c6c4b934e1c00b3ad0845aeeb37c3
SHA1 1155d0647ab204735b0e26ebcc845bea30cbea75
SHA512 844e6a1f06dd308e1ebc8cb7b7251c7614254ab8efbe8489ff59490b6b2ed1ef74fbcc1058f15a5a1410954d9b79845678dea57d37b87eb798493820d73b80e8
SSDEEP 1536:9jsc3Y/jsc3YQNuSMWRPwACFyw/YZX1Ou8et:9j/Oj/Z9AFywGp8et
TLSH
T11573E1025FB3B811FAD455B107EED54CB7025A219783768E3CECAA13BF25782272FA51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bujuckline.ozj.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Effect\partCharge1\bujuckline.ozj.descargando
Size 21KB
SHA256 7a10b97df328f3baa0da1f321ba9e03eb92dc09c9da34e206c953103c9d049e2
MD5 d17ae6223bd0a4ee899e0f3371be5288
SHA1 72a6df958f18b87e540c163aaade24ca6d42dab5
SHA512 6315a49d1c636a296d3c40653a560c2cc0d3d786db35be2a47870f21e03f9cc025287e975d3661d2e2cbf8d0fb55feda3ce6f503ce46f8e08ea8b82a1ee4ee5a
SSDEEP 384:QI268X6l268Xu7Wkabjz1eQNYNg700HHsnaZ3h08wXazf:QIX8XQX8Xu7WxNYy1MaZxeqzf
TLSH
T1BBA27C21BB53AF51DAE0673548E2D345D392AF0BA5A306C2B15E25427FA07C0AF0F287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IBSCategory.txt.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\InGameShopScript\512.2012.084\IBSCategory.txt.descargando
Size 586B
SHA256 74dbed1908d6728cb00559ae964f9eb46d0ffe4ac359ec97ea4a3d613bf048c4
MD5 33d835beeef57652789461b607862363
SHA1 2ccba308487936193821bcd17c2945d709ebed05
SHA512 cbcc0c873ebe7b23cadedc9d0951d431c7b66ffe7580e9adf6b5532767e69ccb128a86fa1458d109eb81f26a57de659b606d9a92d769b26b8b79ab23ae450117
TLSH
T1D8F03A25AE4D3CBE335A996278497C35E8E706FF068AD49A4BE87C652710201AF05C2A
MD5 SHA1 SHA512 TLSH

Submit Download

IBSPackage.txt.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\InGameShopScript\512.2012.084\IBSPackage.txt.descargando
Size 59KB
SHA256 39ce724cc9acf4ab9037fe53baff85afe267e8a0169ecf095a94dd879319b74c
MD5 72fa62049c609a42a466de1fbc136d2f
SHA1 c457e4500999436e7e76b97b7469c7d3b999fccf
SHA512 505404118c0eeae8a89b7decb3559fe3ecb51c6b2f44e60767834c4a89b4154bea5d816e49e4bf6b801456be0317243acba6de3a503791024647e469a76fceb3
SSDEEP 1536:Xufic5N6qm986gN6mIlTELxi4Pa5z23USgKyPIMlN:efic5NpIlTfykSgKyPIMlN
TLSH
T1154373271289381AF1EEE58B2D90FC20F531F2BFC9A6C54097F9BAF461679A44379C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IBSProduct.txt.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\InGameShopScript\512.2012.084\IBSProduct.txt.descargando
Size 264KB
SHA256 04afdb66239b44ca2153fcb40bbf291f0f435751a8050c8228d6f2ef2985fc72
MD5 e866e6609dddc7810c906eda109ee960
SHA1 2cb296069b736fea25c42297080db0d2a210ccf8
SHA512 32ef7de3943a241e7c426bfae92bead301347c292f15e4353fd5795efbd80caf4299f754f775a63679c79b98f8251c384d74f54bb900c12f6b497471cc7dee66
SSDEEP 3072:1jOA7RzOaQU/vusDDnQfXWmt6/WS5e5JVlRR1EI85ORdQVmIxyAZiHeTZAToBhoa:1jOA7RzOaQU/msDDnQeD5ORd8xH
TLSH
T19B448B0CBB5C10DF853B7E1E53D272669B78D6E2692F01A30818EE5A14FE0945FB9E1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BalgasRefuge.OZT.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Interface\BalgasRefuge.OZT.descargando
Size 58KB
SHA256 2913925f48875628701b7006b6a52d1e9b919a356f88681b691713016c4b9e9d
MD5 9858b077b75471c973b38365f1610809
SHA1 e8123f276ff1e0bb6a3e18964d2cff8c069f8b0d
SHA512 3dff45bccd722a9559c276623f604352f048b2083e135c52f373479d158223dd43d875a6278537d94d1772b571faf79600471ca419e865f3a3d4b8fee9655dcf
SSDEEP 384:osZLFdKw8QDSdw99uYsssss/sssssshDx7qS95DfE3IDLIGk9/GFossEiqnqBJV:/zdKw8QDPcDDq3IgG2GFowW
TLSH
T10F437CF56BF48F99C53A10F6B852C9FA53681C128A40070F96FA7C2B78B57D96A09313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atlans.OZT.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Interface\atlans.OZT.descargando
Size 58KB
SHA256 df1981f3f5ed46cafbe609fecc13428c10fb6a78a695718680e00a9ea7bcb01e
MD5 a0e069139409e0f0f26fb122a667a3b8
SHA1 ee0e6adc7883b2da7cd305f29d3ef3827a2d9213
SHA512 7f33b5ce4b0e900790dc565304d3ae13add26c1b08b19c2fbf705e2245c1106636a3054ed82bc7bd48716d6575ccdb58dbb90e4540a08f4b0717dc087e1e4b44
SSDEEP 384:HlmpUX/opcww9wJ3dssssssssssssshssssssssssss2qssDssW+/zeRShRBSY+f:8avycwXh+/zeRShHzDZF5NuIYaQJdXB7
TLSH
T17B436E1179C0ED59CE99EBB8DD7AD8F502523C03F15986AF38E37E3B3835272481562A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

backpanel0.ozt.descargando

Path C:\Users\Admin\AppData\Local\Temp\Data\Interface\backpanel0.ozt.descargando
Size 256KB
SHA256 977b913e8ffaa6bfd68299d19f46b69e23547520e8ae2040c55b093eb29d2e57
MD5 363ba742edf2f378c688edbacbf2fce0
SHA1 57b6b5114b24b99c7ce3b7623ba196dbd6757f53
SHA512 ada5b64cb94efb34efb308f1d3b0878e60c839a30ee9047967bf5cc4c26bbf64b76557b477bd7706bd3cbf22661a8a5143172c3eb43fcd52b2f9bc2a6b802a7c
SSDEEP 3072:rRZ+VnyMGQjea76S6EDImlYkqDTwpsmgksVe04W:rC5ImlYBIbCl
TLSH
T11F44FDA55FC9D817E3614179E098F77D9BAEA99C2E0E4202CEFF2CEB7B18B594C51100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2040-7-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-8-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-66-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-94-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-95-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-52-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-51-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-50-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-9-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-62-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-0-0x00007FF8EB2FF000-0x00007FF8EB300000-memory.dmp

Download

memory/2040-6-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-4-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-5-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-3-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-2-0x00007FF8EB170000-0x00007FF8EBB14000-memory.dmp

Download

memory/2040-1-0x0000000000670000-0x000000000069E000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads