General
- Target Launcher.exe
- Size 101.1MB
- Sample260909-pfbsmavfld
- SHA256 0a90074c5f06e9df0bf7ed12a26f831c0e5d39f01537bbe9f3bb03f3e0d3fa54
- MD5 d8691276e68b5513552bc8652d8a08ce
- SHA1 123eb3b43478441d203e81b72120bb615cd975a9
- SHA512 0818884e70ffcf221382bb137eaf85e63cc622d938b693ae50b534b6d8e77ff2acf72ad64a4b2d1b48cd46ac79fbea7f52726757a071cc0ff865002d4d3fcf83
- SSDEEP 3145728:OiTm4v/iTwAqH1nKMnY9NYJo+sUifljLcs22/3:pC4QwAqHpKZ9NYJoxZV
- TLSH T1D9383359AF72D53FF913E072D12816E5726DD09087238ABF222ED49EE4E3F015B88197
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win11-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target Launcher.exe
- Size 101.1MB
- SHA256 0a90074c5f06e9df0bf7ed12a26f831c0e5d39f01537bbe9f3bb03f3e0d3fa54
- MD5 d8691276e68b5513552bc8652d8a08ce
- SHA1 123eb3b43478441d203e81b72120bb615cd975a9
- SHA512 0818884e70ffcf221382bb137eaf85e63cc622d938b693ae50b534b6d8e77ff2acf72ad64a4b2d1b48cd46ac79fbea7f52726757a071cc0ff865002d4d3fcf83
- SSDEEP 3145728:OiTm4v/iTwAqH1nKMnY9NYJo+sUifljLcs22/3:pC4QwAqHpKZ9NYJoxZV
- TLSH T1D9383359AF72D53FF913E072D12816E5726DD09087238ABF222ED49EE4E3F015B88197
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Executes dropped EXE
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1