Overview
overview
3Static
static
3launcher_0...on.exe
windows10-2004-x64
1launcher_0...on.exe
windows11-ltsc_2024-x64
1launcher_0...40.dll
windows10-2004-x64
1launcher_0...40.dll
windows11-ltsc_2024-x64
1launcher_0...64.dll
windows10-2004-x64
1launcher_0...64.dll
windows11-ltsc_2024-x64
1launcher_0...z2.dll
windows10-2004-x64
1launcher_0...z2.dll
windows11-ltsc_2024-x64
1launcher_0...es.dll
windows10-2004-x64
1launcher_0...es.dll
windows11-ltsc_2024-x64
1launcher_0...ib.dll
windows10-2004-x64
1launcher_0...ib.dll
windows11-ltsc_2024-x64
1launcher_0...ma.dll
windows10-2004-x64
1launcher_0...ma.dll
windows11-ltsc_2024-x64
1launcher_0...ue.dll
windows10-2004-x64
1launcher_0...ue.dll
windows11-ltsc_2024-x64
1launcher_0...sl.dll
windows10-2004-x64
1launcher_0...sl.dll
windows11-ltsc_2024-x64
1launcher_0...__.pyc
windows10-2004-x64
3launcher_0...__.pyc
windows11-ltsc_2024-x64
3launcher_0...re.pyc
windows10-2004-x64
3launcher_0...re.pyc
windows11-ltsc_2024-x64
3launcher_0...__.pyc
windows10-2004-x64
3launcher_0...__.pyc
windows11-ltsc_2024-x64
3launcher_0...pi.pyc
windows10-2004-x64
3launcher_0...pi.pyc
windows11-ltsc_2024-x64
3launcher_0...__.pyc
windows10-2004-x64
3launcher_0...__.pyc
windows11-ltsc_2024-x64
3launcher_0...cd.pyc
windows10-2004-x64
3launcher_0...cd.pyc
windows11-ltsc_2024-x64
3launcher_0...nt.pyc
windows10-2004-x64
3launcher_0...nt.pyc
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/10/2026, 10:38
Static task
static1
Behavioral task
behavioral1
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\GregatorDemon.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\GregatorDemon.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\VCRUNTIME140.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\VCRUNTIME140.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_brotli.cp37-win_amd64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_brotli.cp37-win_amd64.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_bz2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_bz2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_ctypes.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_ctypes.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_hashlib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_hashlib.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_lzma.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_lzma.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_queue.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_queue.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_ssl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\_ssl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\certifi\__init__.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\certifi\__init__.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\certifi\core.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\certifi\core.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\__init__.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\__init__.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\api.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\api.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\assets\__init__.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\assets\__init__.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\cd.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\cd.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\constant.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
launcher_0827ac37761b48068b2d0453028b8cd0\lib\charset_normalizer\constant.pyc
Resource
win11ltsc2024-20260911-en
General
- Target launcher_0827ac37761b48068b2d0453028b8cd0\GregatorDemon.exe
- Size 568KB
- Sample261001-mpk2jsad86
- SHA256 120d69f8ea80be32d72dd6faf89dbb07ba62a10d7c2ef99e7cd45bd69d6ef74f
- MD5 255ab867c6312e5ba7576e7f8f8ab052
- SHA1 96192de8adc5736070691b7557d5f2a2b14daaf8
- SHA512 858f08b4b64115cbc658ceac34221200535c0dcb0e13ccca5404c71eb8f8b59e4d21a5fb9bd59edf1dbd81cedf63e677e82055c6c210a1524cf251a59f987939
- SSDEEP 1536:3KCDZARunVvX+9BRghXa9GGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGfoEql:3KCNVW9nWa2n
- TLSH T14BC4906AB681D856D41057788E61D338933BBE9C2D31D34B76E0FF9F3B726C26816A40
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: 35 3688 GregatorDemon.exe