General
- Target LabyModLauncherSetup-latest.exe
- Size 81.3MB
- Sample261002-yp4dnssvbz
- SHA256 96cefdcb371e1a36c13e7a255d3b6fcfc8e90b06fa39f710652ac4373c0ab382
- MD5 d91d42531c55434b06f9db834b45bd23
- SHA1 21176702a5839bef59ef0e1bc76fade3e364b291
- SHA512 c2d955912eb6295151d38d148db411e41ddaa74d7396052b17acd84224c38619816123f8fb3e53b58160474cf29f89998e2c346ac8e9114808f328fa4ff8f711
- SSDEEP 1572864:NcV6fUeokZMIm7tE+p2cA+8bxQ051EJs+MZv0FNOg8prUDBMoIiENu4avtG06:NsoMImJxClO0q6CvOTZIu8Lv00
- TLSH T179183395B611867ED872C4B04599553B26F13ECB0F3689D7118476AE2FB6BF00A2BF0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
LabyModLauncherSetup-latest.exe
Resource
win10v2004-20260911-en
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
LabyModLauncherSetup-latest.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target LabyModLauncherSetup-latest.exe
- Size 81.3MB
- SHA256 96cefdcb371e1a36c13e7a255d3b6fcfc8e90b06fa39f710652ac4373c0ab382
- MD5 d91d42531c55434b06f9db834b45bd23
- SHA1 21176702a5839bef59ef0e1bc76fade3e364b291
- SHA512 c2d955912eb6295151d38d148db411e41ddaa74d7396052b17acd84224c38619816123f8fb3e53b58160474cf29f89998e2c346ac8e9114808f328fa4ff8f711
- SSDEEP 1572864:NcV6fUeokZMIm7tE+p2cA+8bxQ051EJs+MZv0FNOg8prUDBMoIiENu4avtG06:NsoMImJxClO0q6CvOTZIu8Lv00
- TLSH T179183395B611867ED872C4B04599553B26F13ECB0F3689D7118476AE2FB6BF00A2BF0C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Defense Evasion
File and Directory Permissions Modification
1Hide Artifacts
1Ignore Process Interrupts
1Modify Registry
1