6490fb0162c0c686dfeb091dabef678ba091031010edd0d6c919df89f25a69ef

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 14:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
StarLinkGameBridge.exe
Size 420KB
Sample261020-rtf1ls118p
SHA256 6490fb0162c0c686dfeb091dabef678ba091031010edd0d6c919df89f25a69ef
MD5 7ca271d0fee18fda88f9eddd23d1fd92
SHA1 7a75bc525ea9057c0087059d4c1aae6e671c0b65
SHA512 582a367bbcae15d6ca9515aebdf2066a79588e437909c13bf17e0bc4652d24c1e56adfb8a52b5fcbe809027beba2304145a045e05c6008e356c708ea4d29ca66
SSDEEP 6144:Fa3rFqBcvkHHGDPLcJdg4uJ9GY5BLPawKXwpSSWM590iD:IOM/cY4uJ9/5FNbWMYiD
TLSH
T1E4947C0C31E51BA6CBCF5EB4AC60A6B21FB69CDF0416C109F634263C95B65FB8D90396
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe
5432	StarLinkGameBridge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5432	StarLinkGameBridge.exe

C:\Users\Admin\AppData\Local\Temp\StarLinkGameBridge.exe
"C:\Users\Admin\AppData\Local\Temp\StarLinkGameBridge.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5432-0-0x0000000000A40000-0x0000000000AAC000-memory.dmp

Download

memory/5432-1-0x000000001C6E0000-0x000000001C8A2000-memory.dmp

Download

memory/5432-2-0x000000001C630000-0x000000001C640000-memory.dmp

Download

memory/5432-3-0x000000001CDE0000-0x000000001D308000-memory.dmp

Download

memory/5432-5-0x000000001C630000-0x000000001C640000-memory.dmp

Download