Analysis

  • user interaction
    yes
  • max time kernel
    76s
  • max time network
    31s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/08/2026, 10:21

General

  • Target
    ArmaLauncherClient.exe
  • Size 75.3MB
  • Sample260825-mdvrlsgg24
  • SHA256 eddf123ea0fc47fab5bc9d4e04a6dbac5d48949a91a713d6f28b9f7daa115a37
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ArmaLauncherClient.exe
    "C:\Users\Admin\AppData\Local\Temp\ArmaLauncherClient.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:4972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ArmaLauncherClient\w6_-lWDNyMaD\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ArmaLauncherClient\w6_-lWDNyMaD\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 58c4e1174515ec7d07dc6b1a5c258aae88572576e1bc9f09ea92e555752b2554
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\ArmaLauncherClient\w6_-lWDNyMaD\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 098d9cefaca7b1e36460eb28f2725d7afdb8e93855c29f8dd3627a1fb692ae8e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        launcher.log

        • Path C:\Users\Admin\AppData\Local\Temp\launcher.log
        • Size 1KB
        • SHA256 8eac9e1509a326eda32f3704bb9d631fa4ac8cf4e40ebefb870c4dcd233e40b5
        • MD5 SHA1 SHA512 TLSH

        memory/4972-22-0x000001A5954F0000-0x000001A595540000-memory.dmp

        memory/4972-117-0x000001AD9D920000-0x000001AD9D940000-memory.dmp

        memory/4972-66-0x000001A595B50000-0x000001A595B80000-memory.dmp

        memory/4972-77-0x000001AD9D7B0000-0x000001AD9D8B0000-memory.dmp

        memory/4972-81-0x000001A595C40000-0x000001A595C90000-memory.dmp

        memory/4972-85-0x000001AD9E380000-0x000001AD9EAF0000-memory.dmp

        memory/4972-93-0x000001A5978C0000-0x000001A5978F0000-memory.dmp

        memory/4972-97-0x000001AD9DA40000-0x000001AD9DB40000-memory.dmp

        memory/4972-89-0x000001A596090000-0x000001A5960C0000-memory.dmp

        memory/4972-42-0x000001A5957A0000-0x000001A595820000-memory.dmp

        memory/4972-62-0x000001A595AE0000-0x000001A595B00000-memory.dmp

        memory/4972-58-0x000001A595A80000-0x000001A595AA0000-memory.dmp

        memory/4972-54-0x000001A595A40000-0x000001A595A60000-memory.dmp

        memory/4972-50-0x000001A595690000-0x000001A5956B0000-memory.dmp

        memory/4972-46-0x000001A595160000-0x000001A595170000-memory.dmp

        memory/4972-38-0x000001A595200000-0x000001A595220000-memory.dmp

        memory/4972-34-0x000001AD9B110000-0x000001AD9B900000-memory.dmp

        memory/4972-113-0x000001AD9DB40000-0x000001AD9DC00000-memory.dmp

        memory/4972-6-0x000001A593FF0000-0x000001A594F40000-memory.dmp

        memory/4972-10-0x000001AD99A00000-0x000001AD9A920000-memory.dmp

        memory/4972-70-0x000001A595B00000-0x000001A595B20000-memory.dmp

        memory/4972-109-0x000001AD9D8B0000-0x000001AD9D8D0000-memory.dmp

        memory/4972-26-0x000001A595580000-0x000001A5955C0000-memory.dmp

        memory/4972-121-0x000001A5979B0000-0x000001A5979C0000-memory.dmp

        memory/4972-125-0x000001AD9EFB0000-0x000001AD9EFD0000-memory.dmp

        memory/4972-134-0x000001AD9FB20000-0x000001AD9FB60000-memory.dmp

        memory/4972-130-0x000001AD9FD30000-0x000001AD9FEE0000-memory.dmp

        memory/4972-138-0x000001AD9FFA0000-0x000001ADA0020000-memory.dmp

        memory/4972-142-0x000001ADA0130000-0x000001ADA01D0000-memory.dmp

        memory/4972-146-0x000001ADA0560000-0x000001ADA07D0000-memory.dmp

        memory/4972-155-0x000001ADA01D0000-0x000001ADA01F0000-memory.dmp

        memory/4972-151-0x000001ADA07D0000-0x000001ADA0880000-memory.dmp

        memory/4972-159-0x000001ADA0BE0000-0x000001ADA0DB0000-memory.dmp

        memory/4972-167-0x000001ADA0E50000-0x000001ADA0EB0000-memory.dmp

        memory/4972-163-0x000001ADA09D0000-0x000001ADA0A00000-memory.dmp

        memory/4972-30-0x000001A595630000-0x000001A595680000-memory.dmp

        memory/4972-183-0x000001ADA1270000-0x000001ADA12C0000-memory.dmp

        memory/4972-18-0x000001A595390000-0x000001A5954F0000-memory.dmp

        memory/4972-14-0x000001A592E80000-0x000001A5930A0000-memory.dmp

        memory/4972-192-0x000001ADA1330000-0x000001ADA13A0000-memory.dmp

        memory/4972-196-0x000001ADA0940000-0x000001ADA0950000-memory.dmp

        memory/4972-200-0x000001ADA0A00000-0x000001ADA0A10000-memory.dmp

        memory/4972-204-0x000001ADA5F00000-0x000001ADA5F10000-memory.dmp