Analysis
- max time kernel
149s - max time network
154s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
22/10/2026, 16:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ShockLauncher.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
ShockLauncher.exe
Resource
win10ltsc2021-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ShockLauncher.exe
Resource
win11-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
ShockLauncher.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target ShockLauncher.exe
- Size 71.6MB
- Sample261022-vb93hsgs7k
- SHA256 e715093c67ed80963dc829d90e0d347186f3d3ccb53f554dc806fe18d87bcbd6
- MD5 e0b589c4f46561462ceb312488bf4cac
- SHA1 7927a5259263d88701730565fdac03b16bb118b2
- SHA512 2ae4b66f8b18d19a9518b96282babcdf8a2d2ed6d2ad1f21b646f51dd3f967b03a930d5dbfda8ab8958c0a8a14de0822934c4356965abbf3364a65898e2a577f
- SSDEEP 1572864:+ahmnSKwPiaRt4JH7L01oWI3MONoJ2lhcUv/klzSFus:++m5wPD4p7LzbcoO8klWFv
- TLSH T11BF72356E2F900E8D9BBC0B8C6571517E7B23445173497EB66A48A692F33FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 4672 ShockLauncher.exe 4672 ShockLauncher.exe 4672 ShockLauncher.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4672 ShockLauncher.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\ShockLauncher\v8Tb3f0dndkV\D3DCompiler_47_cor3.dll
- Size 4.7MB
- SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
- MD5 a7349236212b0e5cec2978f2cfa49a1a
- SHA1 5abb08949162fd1985b89ffad40aaf5fc769017e
- SHA512 c7ff4f9146fefedc199360aa04236294349c881b3865ebc58c5646ad6b3f83fca309de1173f5ebf823a14ba65e5ada77b46f20286d1ea62c37e17adbc9a82d02
- SSDEEP 49152:FCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvpiD0N+YEzI4og/RfzHLeHTRhFRNS:EG2QCwmHXnog/pzHAo/A2L
- TLSH T19A367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\ShockLauncher\v8Tb3f0dndkV\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 75fc0d383ea009ea9453a4589fa8d88d149abcac371bb5eb983d6ece8f1243eb
- MD5 a5e9f16c6a381a2241bef8eed1c20309
- SHA1 574d1412c55cb2321d2d6545cbb439368623e2a5
- SHA512 d9509720807f9298caa1af3abbb098348726700815559febd3417d929e57c7839f498391e92e2a02d8c984db9bf786d25170471fea71bc64c9329b29242244e7
- SSDEEP 24576:Tl8W6eU6UPXhA+JYCqX4T3MJj7OQ1Niqdhvc7PgNfb4i7fokJMpw5i2k1/m6eg9k:TH6emPXrYCqX4T3Q1Niqzc74xb4izMp7
- TLSH T118453A22D2E642E4C47FC1B8C646972BFBB17409231C66DB47608B652F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\ShockLauncher\v8Tb3f0dndkV\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 4c5e43b075c361ca35f04b8b1ba5cd85b00b00671731e49db5c690c92d957113
- MD5 f69b75aef8075152e512cae615e4192b
- SHA1 c437679e2dc249e9e9a02d10df9b86955e6a7b01
- SHA512 c3c4d71c1b367760fa0989d259e67ff0b6d3b04476a08399cc69cb718083ad05d3f0803a3f928da08d8aaa2f075a2386091e6f8320f8796c5d68ed9159adf571
- SSDEEP 24576:hp3YLMLrT18UP2HTePBDpuZiV1/QcqylsQdS/etT4ZdSAcMGuOk8SIXlTn:Ym3iUP2HKBDpuSUypM2tWdSAc5uOq8F
- TLSH T1EF953A4676EC40EAD47AE23CDAD7461BF23278142761A7CF23A4479D6F27BD0097A360
- MD5 SHA1 SHA512 SSDEEP TLSH