Analysis
- user interaction
yes - max time kernel
137s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/08/2026, 22:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GTA6_CyberLeak_Launcher.exe
Resource
win10v2004-20260513-en
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
GTA6_CyberLeak_Launcher.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target GTA6_CyberLeak_Launcher.exe
- Size 70.8MB
- Sample260830-2ffg2a1fjd
- SHA256 4c0c90a91446f8f408f15349cc74d828f1b984c9ad355ffbbb87f8fb1beb9a7c
- MD5 626e0779cd07b78c7df33c296e348e26
- SHA1 cc1d0aaac759973fd5aa6587b92d32fa72f3734c
- SHA512 5310d50cc7364b890920e8b6cbd87abb9c9b737ecf14b069b3a87301bbe15dcda4b5c280bc18654a8cbc34689d34cbe541b570110013361a36ffd8144ad95132
- SSDEEP 1572864:W5shdn0iKCTGXA/F7crWwOXIU93jHh7tGPkwVoSPxj0b:uFCTGgJwOB3jHhQrR0b
- TLSH T190F72356E2FD00E8D57AC0BCC6575517E7B1385917309BEB62A48A652F33BE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 1984 GTA6_CyberLeak_Launcher.exe 1984 GTA6_CyberLeak_Launcher.exe 1984 GTA6_CyberLeak_Launcher.exe 1984 GTA6_CyberLeak_Launcher.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1984 GTA6_CyberLeak_Launcher.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
- MD5 b43c09fd1eab8feb0d9d87e6eeb8fa95
- SHA1 d8935765faf6e12d1d7f7e8b0f54f8e0f077a43c
- SHA512 1432fefe98029f475c0a53e0c551dd917713da346e9b7d5ee5ee5314fb43072cfb24f95b4e2ceef2f67d7f01084d398428b075bf09812a9f90f510f0a40bdfc8
- SSDEEP 24576:mhNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa7:mxKcdPHmMLYpX7T35/fPoGPpGFjztQcT
- TLSH T1F0453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\vcruntime140_cor3.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\GTA6_CyberLeak_Launcher\p+GGuXmCOZ21DVXLdT_jOfbz5PohyiU=\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 cc40e27a3a7e14dd4a8c423081fa367406e093be1dc79759e56d828e140bc014
- MD5 c0a4429e4c59b9b4487c570ca92cd312
- SHA1 2263d4e13f507225964c53588a32af0734a7a13c
- SHA512 d5ae03a6d38880eb1eb19dda5e8b3e110f2ac8df46f668b4736055e34f4680f6a679db3b236311829cc1caac951a147d6f1c2b473f6eda245a764bd4844d333e
- SSDEEP 24576:15AzCIrGoleR+kYpETy2yS2Wfb6stIyHXo9HSTt4Myji4sfm/FP9dZDNQJg:CVvcR+kYyrybWbISyHSHyjiffmTlMg
- TLSH T1CA954A4AB6AC40E9C0BAD23CDADB461BF23174152761A7CF27A0479D6F27BD0097B361
- MD5 SHA1 SHA512 SSDEEP TLSH