Overview
overview
7Static
static
3setup.exe
windows11-21h2-x64
1$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...es.exe
windows11-21h2-x64
7$PLUGINSDI...up.exe
windows11-21h2-x64
6$PLUGINSDI...86.exe
windows11-21h2-x64
4$PLUGINSDI...86.exe
windows11-21h2-x64
4HorseLauncher.exe
windows11-21h2-x64
1tor.exe
windows11-21h2-x64
3Analysis
- user interaction
yes - max time kernel
899s - max time network
480s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/09/2026, 04:33
Static task
static1
Behavioral task
behavioral1
Sample
setup.exe
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/runtimes.exe
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/dxwebsetup.exe
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/vc14_x86.exe
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/vc2013_x86.exe
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
HorseLauncher.exe
Resource
win11-20260911-en
Behavioral task
behavioral9
Sample
tor.exe
Resource
win11-20260911-en
General
- Target HorseLauncher.exe
- Size 1.8MB
- Sample260928-e6stqage74
- SHA256 93f83d0ead20be789340a3edd26557416c425e09fb2250077293a57ea58c1337
- MD5 26ddb2522973a597ef9e973c027a1484
- SHA1 af0664fd87ffb8a1699103f2f79b76686ca6b6d4
- SHA512 ce9517a736211899ad6f4cbe2d9ca2698a56098a77a4190e172addf18ff6ceb540911b9b757e43fb16eb5f84bbdbb046d008f23fc97ab588e03a704b62feb49b
- SSDEEP 49152:IQsDAOI96Ap5Fjx0o/fbOp8RWqVDIWdO5g7+s0SiIP9z:UAllOp8RWqVDIWdhh
- TLSH T192959E2376A801F8E1B7C278C9529A03DBB278551F719ADF07D089AA1F236E15F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3152 HorseLauncher.exe