General
- Target NeoLauncher-win-Setup.exe
- Size 343.4MB
- Sample261002-v59nvascle
- SHA256 506681e22ee2255ed9133400e5fa274772de20184ff3a7acfdb0b351a450fa3f
- MD5 263fd20968a6ed921fa28f6056d4a110
- SHA1 b502841ea053b69353ad3d72e4d77782bf4891fa
- SHA512 7e81b274838c0f7584d0b75b19406d419b1830e301981e96db5122aa28cf06be4e1587b426691547b0e08731722240ee80946653b7e735cb9ff9b3e5579343d1
- SSDEEP 6291456:ci8lj06WodRhji/PNoDHbu0MaNrCS5F4wPmDwNsz6yGvIZiYDClgOM4BnvlBQItW:ci880jMlo7bu0zrbFrPmEe+yxZz2AOv4
- TLSH T1CD0933C0F4C2C3F6C58758B1A0A97B3D823619664329C397EBF9BF19B5B83501925F68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NeoLauncher-win-Setup.exe
Resource
win10v2004-20260911-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
NeoLauncher-win-Setup.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target NeoLauncher-win-Setup.exe
- Size 343.4MB
- SHA256 506681e22ee2255ed9133400e5fa274772de20184ff3a7acfdb0b351a450fa3f
- MD5 263fd20968a6ed921fa28f6056d4a110
- SHA1 b502841ea053b69353ad3d72e4d77782bf4891fa
- SHA512 7e81b274838c0f7584d0b75b19406d419b1830e301981e96db5122aa28cf06be4e1587b426691547b0e08731722240ee80946653b7e735cb9ff9b3e5579343d1
- SSDEEP 6291456:ci8lj06WodRhji/PNoDHbu0MaNrCS5F4wPmDwNsz6yGvIZiYDClgOM4BnvlBQItW:ci880jMlo7bu0zrbFrPmEe+yxZz2AOv4
- TLSH T1CD0933C0F4C2C3F6C58758B1A0A97B3D823619664329C397EBF9BF19B5B83501925F68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.