8eb2d8d5e0d0f29667a5563f69a64402198327debe38c682f2b6621af9fa2fb4 | Triage™

Login
Reports

Overview

overview

Static

static

3

NotVirus-Launcher.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
NotVirus-Launcher.exe
Size 138KB
Sample261022-vdepdsv17n
SHA256 8eb2d8d5e0d0f29667a5563f69a64402198327debe38c682f2b6621af9fa2fb4
MD5 cd3bad395496614be1265ed868b1353a
SHA1 f9dd746dcbb2b77dad0d712c5bcab893f4332f66
SHA512 d7597bc4082a0bbb30dc9a7d41b0541bc60e8916c5ae8096506c40463579b45b103b84b19d80de006c5f84e1d1169aa091dfa80cee148b24c9f32732f0a98e18
SSDEEP 1536:u9VS86uBSn5GumuVyQNaC4sQhe2rHDkgAX9rP+cUULBBB8:u9VS86nRmuVynCQjkgAX9rP+cUULBBB
TLSH
T109D3FAA65E2637EFC0AD037AF28F9D240FB179419AA2F61C1591F01BDE51CDD8AC7062
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

adware microsoft defense_evasion discovery persistence phishing spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NotVirus-Launcher.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

24 signatures

900 seconds

adware microsoft defense_evasion discovery persistence phishing spyware trojan

Malware Config

Targets

- Target
  NotVirus-Launcher.exe
- Size 138KB
- SHA256 8eb2d8d5e0d0f29667a5563f69a64402198327debe38c682f2b6621af9fa2fb4
- MD5 cd3bad395496614be1265ed868b1353a
- SHA1 f9dd746dcbb2b77dad0d712c5bcab893f4332f66
- SHA512 d7597bc4082a0bbb30dc9a7d41b0541bc60e8916c5ae8096506c40463579b45b103b84b19d80de006c5f84e1d1169aa091dfa80cee148b24c9f32732f0a98e18
- SSDEEP 1536:u9VS86uBSn5GumuVyQNaC4sQhe2rHDkgAX9rP+cUULBBB8:u9VS86nRmuVynCQjkgAX9rP+cUULBBB
- TLSH
  T109D3FAA65E2637EFC0AD037AF28F9D240FB179419AA2F61C1591F01BDE51CDD8AC7062
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware microsoft defense_evasion discovery persistence phishing spyware trojan
- Modifies WinLogon for persistence
  persistence
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwaremicrosoftdefense_evasiondiscoverypersistencephishingspywaretrojan

© 2018-2026

Terms | Privacy