Analysis
- user interaction
yes - max time kernel
149s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
22/09/2026, 18:47
General
- Target Stand.Launchpad.exe
- Size 74KB
- Sample260922-xfd7radb37
- SHA256 2d3f8de8b5d596e953d467cd8079070abe5e51d3deca159a3776f56965d56222
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 1 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stand.Launchpad.exe"C:\Users\Admin\AppData\Local\Temp\Stand.Launchpad.exe"1⤵
- Downloads MZ/PE file
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/244-0-0x00007FFDC2AFF000-0x00007FFDC2B00000-memory.dmp
memory/244-1-0x000001F0CFDE0000-0x000001F0CFDF6000-memory.dmp
memory/244-2-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-3-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-4-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-7-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-8-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-9-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-13-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-10-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-14-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-15-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-16-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-17-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-18-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-19-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-20-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp
memory/244-21-0x00007FFDC2970000-0x00007FFDC3314000-memory.dmp