General
- Target Astro-Launcher-2.0.9.exe
- Size 51.8MB
- Sample261015-pbbbastvcv
- SHA256 53bd5c1b188119bb73943210c2eafe8ef9cb6990ca3da9700cdaf3249581df68
- MD5 8c037ab348c283ed28d778f8ebd45f93
- SHA1 6a60303245e7cf3f2f3a0abc11d9faa875f59318
- SHA512 6df583753a14698aa60f7690356ab7d006cf325e3a34faea8511146da95ca95b87f3f6133f638f6387cb13d4e66ce1f77025deceff77ef1a609e5970db64450e
- SSDEEP 1572864:MoFNkswZpFRl+RBwXzTUX0w8mxmxTOlGZn:ZFHapFX+RBwXP5fmxnlEn
- TLSH T119C71256E2F900E8D57BC0B8C6575517EBB2344917309BEB66A48A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Astro-Launcher-2.0.9.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Astro-Launcher-2.0.9.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Astro-Launcher-2.0.9.exe
- Size 51.8MB
- SHA256 53bd5c1b188119bb73943210c2eafe8ef9cb6990ca3da9700cdaf3249581df68
- MD5 8c037ab348c283ed28d778f8ebd45f93
- SHA1 6a60303245e7cf3f2f3a0abc11d9faa875f59318
- SHA512 6df583753a14698aa60f7690356ab7d006cf325e3a34faea8511146da95ca95b87f3f6133f638f6387cb13d4e66ce1f77025deceff77ef1a609e5970db64450e
- SSDEEP 1572864:MoFNkswZpFRl+RBwXzTUX0w8mxmxTOlGZn:ZFHapFX+RBwXP5fmxnlEn
- TLSH T119C71256E2F900E8D57BC0B8C6575517EBB2344917309BEB66A48A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.