Analysis
- user interaction
yes - max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
19/09/2026, 15:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
General
- Target Launcher.exe
- Size 1.1MB
- Sample260919-spl7hasdpb
- SHA256 a3bb4b40a8671137df6fc5306b7a5d878d18dcc24cabfc4c519c57c5be2232e8
- MD5 741e78c58aac68fbd2ea02dccda51a20
- SHA1 323dd1f05f689840c3ed19b3b7911b4f44724dff
- SHA512 9d505abfd8a07c3f542a2c46b48ba6e99f578cf97460776c6b894c4f116f5483c7f05acf1dccda9c4d9f6fc832ff8e38df3f038ed38cd226385b85a5db9d6207
- SSDEEP 12288:Ibs/m0E54jwaFXGc8lEBBBHGBKq2IZwDbvfqItNqdg:IbOVE5ifGPRZw/vf3fd
- TLSH T102357C83E7A385D8C116C9B5534BF137F9627C8E4B157197ABC41E633A67BA4E22CB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Launcher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Launcher.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Launcher.exe"C:\Users\Admin\AppData\Local\Temp\Launcher.exe"1⤵
- Checks processor information in registry
PID:4552
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2612