Overview

overview

3

Static

static

3

StarLink.exe

windows10-2004-x64

1

StarLink.exe

windows11-ltsc_2024-x64

1

StarLinkCreator.exe

windows10-2004-x64

1

StarLinkCreator.exe

windows11-ltsc_2024-x64

1

StarLinkGa...ge.exe

windows10-2004-x64

1

StarLinkGa...ge.exe

windows11-ltsc_2024-x64

1

plugins/starlink.py

windows10-2004-x64

3

plugins/starlink.py

windows11-ltsc_2024-x64

3

runtime_sr..._01.js

windows10-2004-x64

3

runtime_sr..._01.js

windows11-ltsc_2024-x64

3

runtime_sr..._05.js

windows10-2004-x64

3

runtime_sr..._05.js

windows11-ltsc_2024-x64

3

runtime_sr..._01.js

windows10-2004-x64

3

runtime_sr..._01.js

windows11-ltsc_2024-x64

3

runtime_sr..._05.js

windows10-2004-x64

3

runtime_sr..._05.js

windows11-ltsc_2024-x64

3

runtime_sr..._06.js

windows10-2004-x64

3

runtime_sr..._06.js

windows11-ltsc_2024-x64

3

runtime_sr..._07.js

windows10-2004-x64

3

runtime_sr..._07.js

windows11-ltsc_2024-x64

3

runtime_sr..._10.js

windows10-2004-x64

3

runtime_sr..._10.js

windows11-ltsc_2024-x64

3

runtime_sr..._13.js

windows10-2004-x64

3

runtime_sr..._13.js

windows11-ltsc_2024-x64

3

runtime_sr..._15.js

windows10-2004-x64

3

runtime_sr..._15.js

windows11-ltsc_2024-x64

3

runtime_sr..._19.js

windows10-2004-x64

3

runtime_sr..._19.js

windows11-ltsc_2024-x64

3

runtime_sr..._01.js

windows10-2004-x64

3

runtime_sr..._01.js

windows11-ltsc_2024-x64

3

runtime_sr..._05.js

windows10-2004-x64

3

runtime_sr..._05.js

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/10/2026, 14:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    StarLink.exe
  • Size 603KB
  • Sample261020-rtf1ls118p
  • SHA256 417cc4662ba26649a3b44f02c1cc19b24f9cb1f4074aa5e364d688173ea0bff5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\StarLink.exe
    "C:\Users\Admin\AppData\Local\Temp\StarLink.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Users\Admin\AppData\Local\Temp\StarLinkGameBridge.exe
      "C:\Users\Admin\AppData\Local\Temp\StarLinkGameBridge.exe" --parent-pid 2068
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:5012

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2068-0-0x0000000000B10000-0x0000000000BAA000-memory.dmp
        Download

        memory/2068-1-0x000000001C7F0000-0x000000001C9B2000-memory.dmp
        Download

        memory/2068-2-0x0000000003520000-0x0000000003530000-memory.dmp
        Download

        memory/2068-3-0x000000001CEF0000-0x000000001D418000-memory.dmp
        Download

        memory/2068-8-0x0000000003520000-0x0000000003530000-memory.dmp
        Download

        memory/2068-11-0x0000000003520000-0x0000000003530000-memory.dmp
        Download

        memory/2068-12-0x0000000003520000-0x0000000003530000-memory.dmp
        Download

        memory/2068-13-0x0000000003520000-0x0000000003530000-memory.dmp
        Download

        memory/2068-15-0x0000000003520000-0x0000000003530000-memory.dmp
        Download

        memory/5012-7-0x00000000002F0000-0x000000000035C000-memory.dmp
        Download

        memory/5012-14-0x000000001BAB0000-0x000000001BAC0000-memory.dmp
        Download