Analysis
- user interaction
yes - max time kernel
38s - max time network
42s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
11/10/2026, 09:11
General
- Target HexiumLauncher.exe
- Size 66.0MB
- Sample261011-k5yapsfb47
- SHA256 08dd1447ca68fef20eb4025197c462fb1bdc56d5328613ddb646ac7191ac189e
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious behavior: EnumeratesProcesses 18 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HexiumLauncher.exe"C:\Users\Admin\AppData\Local\Temp\HexiumLauncher.exe"1⤵
- Checks computer location settings
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5160-7-0x0000000180000000-0x0000000180A25000-memory.dmp
memory/5160-10-0x000001B2922C0000-0x000001B292F71000-memory.dmp
memory/5160-21-0x000001B2909C0000-0x000001B2909E0000-memory.dmp
memory/5160-24-0x000001B2909E0000-0x000001B2909F8000-memory.dmp
memory/5160-18-0x000001B28EFC0000-0x000001B28EFCD000-memory.dmp
memory/5160-15-0x000001B2909A0000-0x000001B2909B2000-memory.dmp
memory/5160-12-0x000001B291170000-0x000001B291231000-memory.dmp
memory/5160-27-0x000001B291030000-0x000001B29112E000-memory.dmp
memory/5160-47-0x000001B291150000-0x000001B291157000-memory.dmp
memory/5160-50-0x000001B291320000-0x000001B29132A000-memory.dmp
memory/5160-53-0x000001B291620000-0x000001B291636000-memory.dmp
memory/5160-44-0x000001B2913C0000-0x000001B2913FE000-memory.dmp
memory/5160-41-0x000001B291370000-0x000001B2913B7000-memory.dmp
memory/5160-38-0x000001B291260000-0x000001B2912A0000-memory.dmp
memory/5160-35-0x000001B2912B0000-0x000001B2912D1000-memory.dmp
memory/5160-30-0x000001B291240000-0x000001B291253000-memory.dmp
memory/5160-56-0x000001B291670000-0x000001B291686000-memory.dmp
memory/5160-59-0x000001B291D10000-0x000001B291D29000-memory.dmp
memory/5160-63-0x000001B2B5960000-0x000001B2B5A15000-memory.dmp
memory/5160-65-0x000001B2B5CC0000-0x000001B2B5E78000-memory.dmp
memory/5160-68-0x000001B2B58A0000-0x000001B2B58D4000-memory.dmp
memory/5160-71-0x000001B2B4D40000-0x000001B2B4D6A000-memory.dmp
memory/5160-74-0x000001B2B78D0000-0x000001B2B7A3A000-memory.dmp
memory/5160-77-0x000001B2B5AB0000-0x000001B2B5B3A000-memory.dmp
memory/5160-86-0x000001B2B5E80000-0x000001B2B5F27000-memory.dmp
memory/5160-83-0x000001B2B5B40000-0x000001B2B5B9C000-memory.dmp
memory/5160-80-0x000001B2B5930000-0x000001B2B5951000-memory.dmp
memory/5160-89-0x000001B2B58E0000-0x000001B2B591C000-memory.dmp
memory/5160-92-0x000001B2B5A20000-0x000001B2B5A9C000-memory.dmp
memory/5160-95-0x000001B2B5BA0000-0x000001B2B5BB9000-memory.dmp
memory/5160-101-0x000001B2B5BC0000-0x000001B2B5BD7000-memory.dmp
memory/5160-98-0x000001B2B5C10000-0x000001B2B5C35000-memory.dmp
memory/5160-104-0x000001B291B20000-0x000001B291B25000-memory.dmp
memory/5160-107-0x000001B2B5C90000-0x000001B2B5CA7000-memory.dmp
memory/5160-110-0x000001B2B6330000-0x000001B2B6350000-memory.dmp
memory/5160-113-0x000001B2B5CB0000-0x000001B2B5CB6000-memory.dmp
memory/5160-116-0x000001B2B64B0000-0x000001B2B6574000-memory.dmp
memory/5160-124-0x000001B2B63C0000-0x000001B2B63E9000-memory.dmp
memory/5160-130-0x000001B2B6380000-0x000001B2B6389000-memory.dmp
memory/5160-127-0x000001B2B6370000-0x000001B2B637F000-memory.dmp
memory/5160-133-0x000001B2B6580000-0x000001B2B65D5000-memory.dmp