Analysis

  • max time kernel
    148s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 16:06

General

  • Target
    Aurora15Connector.exe
  • Size 6.9MB
  • Sample260910-tj2knsscjb
  • SHA256 92f321cc119d685fd46a9b131d7acd6411cd9667b64e27f5a14ed7038730d56c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Aurora15Connector.exe
    "C:\Users\Admin\AppData\Local\Temp\Aurora15Connector.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4820
    • C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.exe
      "C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.exe" --launcher-update-probe --ready-file C:\Users\Admin\AppData\Local\Aurora15Connector\updates\update-b006041de9aa4cd99382c007b95fd165\launcher-5fd5d0cf00544a55ba0dd70a90cb0a12.ready --ready-token BFA486A6327BCE8289047734D61476CA925F190695A10B9A2F0BFDEE5FEAF6C2 --expected-sha256 63D0D7A9C054ACC66717A756EF82935B99453B3F9A5C96C52975A93AAD851B99 --expected-length 10952704
      2⤵
      • Executes dropped EXE
      PID:5480

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Aurora15Connector.28118a76b00240698e6c6e07f3bda09a.new

        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.28118a76b00240698e6c6e07f3bda09a.new
        • Size 10.4MB
        • SHA256 63d0d7a9c054acc66717a756ef82935b99453b3f9a5c96c52975a93aad851b99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Aurora15Connector.ini

        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\Aurora15Connector.ini
        • Size 322B
        • SHA256 3d49fe92bfb99eec8ab483963e33e61b5b4bb38f2359907e727420a8fdf5c25e
        • MD5 SHA1 SHA512 TLSH

        launcher.log

        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\logs\launcher.log
        • Size 382B
        • SHA256 2b805079d406babded84730f3b9f6fadc44021b69d7662129e4bf901482c240e
        • MD5 SHA1 SHA512 TLSH

        launcher.log

        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\logs\launcher.log
        • Size 479B
        • SHA256 4ec9ae193832d0465e90039d451e4a94d58354e13c82cc0941d9757a7c5c1902
        • MD5 SHA1 SHA512 TLSH

        launcher.log

        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\logs\launcher.log
        • Size 1KB
        • SHA256 16cb96a1d22736dddddc5610244fe686b2b9189b47e49204543affcd7c025e62
        • MD5 SHA1 SHA512 TLSH

        launcher-5fd5d0cf00544a55ba0dd70a90cb0a12.ready

        • Path C:\Users\Admin\AppData\Local\Aurora15Connector\updates\update-b006041de9aa4cd99382c007b95fd165\launcher-5fd5d0cf00544a55ba0dd70a90cb0a12.ready
        • Size 64B
        • SHA256 ce0543dd3bd585029c3f282f180d54ba070b3aaf477bb66d270d36dc2ec8ded5
        • MD5 SHA1 SHA512 TLSH