Analysis

  • user interaction
    yes
  • max time kernel
    137s
  • max time network
    128s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/08/2026, 22:31

General

  • Target
    GTA6_CyberLeak_Launcher.exe
  • Size 70.8MB
  • Sample260830-2ffg2a1fjd
  • SHA256 4c0c90a91446f8f408f15349cc74d828f1b984c9ad355ffbbb87f8fb1beb9a7c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GTA6_CyberLeak_Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\GTA6_CyberLeak_Launcher.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:1984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\vcruntime140_cor3.dll
        • Size 121KB
        • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 cc40e27a3a7e14dd4a8c423081fa367406e093be1dc79759e56d828e140bc014
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1984-92-0x000002C7039C0000-0x000002C703A50000-memory.dmp

        memory/1984-112-0x000002C705020000-0x000002C705070000-memory.dmp

        memory/1984-49-0x000002C74B8A0000-0x000002C74B8C0000-memory.dmp

        memory/1984-69-0x000002C703540000-0x000002C703560000-memory.dmp

        memory/1984-65-0x000002C74BA20000-0x000002C74BA50000-memory.dmp

        memory/1984-61-0x000002C74B900000-0x000002C74B920000-memory.dmp

        memory/1984-57-0x000002C74B970000-0x000002C74B9B0000-memory.dmp

        memory/1984-53-0x000002C74B8C0000-0x000002C74B8E0000-memory.dmp

        memory/1984-45-0x000002C74AD10000-0x000002C74AD30000-memory.dmp

        memory/1984-41-0x000002C7473C0000-0x000002C7473D0000-memory.dmp

        memory/1984-37-0x000002C747560000-0x000002C747580000-memory.dmp

        memory/1984-33-0x000002C74ADC0000-0x000002C74AE40000-memory.dmp

        memory/1984-9-0x000002C700000000-0x000002C700F60000-memory.dmp

        memory/1984-80-0x000002C703810000-0x000002C703860000-memory.dmp

        memory/1984-78-0x000002C703700000-0x000002C703810000-memory.dmp

        memory/1984-29-0x000002C700F60000-0x000002C701790000-memory.dmp

        memory/1984-85-0x000002C704370000-0x000002C704B10000-memory.dmp

        memory/1984-116-0x000002C703AB0000-0x000002C703AD0000-memory.dmp

        memory/1984-6-0x000002C748790000-0x000002C749420000-memory.dmp

        memory/1984-100-0x000002C704F10000-0x000002C704FD0000-memory.dmp

        memory/1984-21-0x000002C749C70000-0x000002C749CC0000-memory.dmp

        memory/1984-108-0x000002C703AA0000-0x000002C703AB0000-memory.dmp

        memory/1984-88-0x000002C7038B0000-0x000002C7038E0000-memory.dmp

        memory/1984-104-0x000002C7038E0000-0x000002C703900000-memory.dmp

        memory/1984-120-0x000002C705B60000-0x000002C705BB0000-memory.dmp

        memory/1984-96-0x000002C703A50000-0x000002C703A80000-memory.dmp

        memory/1984-25-0x000002C749D00000-0x000002C749D40000-memory.dmp

        memory/1984-17-0x000002C747990000-0x000002C747AF0000-memory.dmp

        memory/1984-133-0x000002C705CD0000-0x000002C705D10000-memory.dmp

        memory/1984-137-0x000002C705AE0000-0x000002C705AF0000-memory.dmp

        memory/1984-129-0x000002C705C70000-0x000002C705CD0000-memory.dmp

        memory/1984-141-0x000002C706110000-0x000002C706180000-memory.dmp

        memory/1984-145-0x000002C706400000-0x000002C7065B0000-memory.dmp

        memory/1984-154-0x000002C706720000-0x000002C7067D0000-memory.dmp

        memory/1984-150-0x000002C7065B0000-0x000002C706620000-memory.dmp

        memory/1984-158-0x000002C706AB0000-0x000002C706CB0000-memory.dmp

        memory/1984-162-0x000002C7067F0000-0x000002C706880000-memory.dmp

        memory/1984-166-0x000002C706880000-0x000002C7068A0000-memory.dmp

        memory/1984-170-0x000002C706180000-0x000002C706190000-memory.dmp

        memory/1984-178-0x000002C70AC30000-0x000002C70AC50000-memory.dmp

        memory/1984-174-0x000002C70AC80000-0x000002C70ACB0000-memory.dmp

        memory/1984-182-0x000002C705AF0000-0x000002C705B00000-memory.dmp

        memory/1984-13-0x000002C7498E0000-0x000002C749B10000-memory.dmp