21205dc35aaba89ccd93e8e38166285ac1365fa4337e14482a082b9a0e471d93

Resubmissions

23/10/2026, 02:49

261023-dbcctabw8j4

23/10/2026, 02:47

261023-c91bvscb474

Analysis

user interaction
yes
max time kernel
61s
max time network
63s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/10/2026, 02:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ApexiaLauncher.exe
Size 367KB
Sample261023-c91bvscb47
SHA256 21205dc35aaba89ccd93e8e38166285ac1365fa4337e14482a082b9a0e471d93
MD5 b37206f549cc459fdd56a6d6542a4c04
SHA1 56921e9ef17a0abbaa11fcf370651bddbb19a42a
SHA512 b87c52cab82f64bc29bbd42469f14f6df27ac4ac94e1f5113695b8d381aead96c8a9adf2eee744fe2ffde1770e0253978036a69a0d4584495c15de23d613cad0
SSDEEP 6144:ERDauhDDCzyghlFtbK8A+yXjDd69jc2RJrHR0xYQxCqeNpZGfffffH1qlL34FtlP:ERDautaxFtbKRfXjD49hpKe3tEOS
TLSH
T1A0849F217A41E032D6A205715F79DFA58A6DA8710FA569CBB3C01FBE89301C2EB35F17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	ApexiaLauncher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	ApexiaLauncher.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ApexiaLauncher.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8782C6C304353BCFD29692D2593E7D44D934FF11	ApexiaLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8782C6C304353BCFD29692D2593E7D44D934FF11\Blob = 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	ApexiaLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8782C6C304353BCFD29692D2593E7D44D934FF11\Blob = 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	ApexiaLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8782C6C304353BCFD29692D2593E7D44D934FF11\Blob = 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	ApexiaLauncher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8782C6C304353BCFD29692D2593E7D44D934FF11\Blob = 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	ApexiaLauncher.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5368 wrote to memory of 5744	5368	ApexiaLauncher.exe	93

C:\Users\Admin\AppData\Local\Temp\ApexiaLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\ApexiaLauncher.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:5368
- C:\Windows\SysWOW64\tar.exe
  "C:\Windows\system32\tar.exe" -x -f "C:\Users\Admin\AppData\Local\Apexia\Client.zip" -C "C:\Users\Admin\AppData\Local\Apexia\Client.new"
  2⤵
  PID:5744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

diffuse.dds

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\PlatformContent\pc\textures\aluminum\diffuse.dds
Size 152B
SHA256 8552dc6e0cb6d92005d531258fdb0648f943c720eafff55b51659ec80b7c3e3c
MD5 b79e6464c2a4e060275c1a947d2c46fc
SHA1 cbc5d75c02e4613e9002e39e9ef1d00d63183fd8
SHA512 79f8c6437f1e73b2b130fbdad2e4890bd0510cc47cfa77fa96f44e1ff4dcaf7718a7677df929e423f5623d59a94e1876d72be73c0be411128b29702237c9d0fe
TLSH
T14FC01102EC80000ECA2A0A308A222C8CC02F00A2CE8288030A0028080323020AAA20A0
MD5 SHA1 SHA512 TLSH

Submit Download

normal.dds

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\PlatformContent\pc\textures\pebble\normal.dds
Size 176B
SHA256 2a51ad9239a2102af2c08ee23e18407c3500770a931332a722c643ffca90a60e
MD5 620e055b9e500e85a131d8be2a65c11e
SHA1 d7fa8af56bfcfd48f38931e3ef8606585664a248
SHA512 551a93a5cffbc008f6d6b122f4c45d686faf1ef5a90975b8b2ef906123d7981e40efc644494957544832f5f605dac434714239a17baea97fcb38175d589d8794
TLSH
T113C01102E08E03A2CA0E0E38822A3308C2AA00220A23880A0BC02C83330B030CAA2C80
MD5 SHA1 SHA512 TLSH

Submit Download

am_FEMININE.pak

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\cef\locales\am_FEMININE.pak
Size 18B
SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
MD5 SHA1 SHA512

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\AppTempCommon\LuaApp\Models\.robloxrc
Size 43B
SHA256 2187fc8fed9d244f25492aae6df320c0ed6c004bcc8006f46f29d214998b5549
MD5 076c228c0e64a4c738e18656b3571b6a
SHA1 52e33bfdc3940cb3420dfef6d9eb7972c7d6d5b9
SHA512 d451bf819c70573ec6fbc6c2dbd01e93a22cc191bfff81604e5f8868d4f7d69f00565335afd5316f75f2fc732a90e3ea22058c25d573724b15b6c1748d8fce57
MD5 SHA1 SHA512

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\CodeCoverage\.robloxrc
Size 196B
SHA256 81c9eea5327aa86b7c1b8695539ca86f2cba63144c0ba0baf9981f92929087eb
MD5 eda1ff02a3d52372cabc506469c14906
SHA1 4e8a81495ce277d31cef4e69afb687c601f4892c
SHA512 a8e9aad10a8196b8a869174ba3d690e77472b6d55a69b56cd2f5f40e06a5c7e10088fbd02f332424b0909dab647da20f30d860eb52282e72d37dc2cb052a343f
TLSH
T151D0C9B3E15FA883F8C488CB546C408160242CB866483A9B4BC1E6E1D5CEC7C3211447
MD5 SHA1 SHA512 TLSH

Submit Download

Otter.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\InGameMenuDependencies\Otter.lua
Size 251B
SHA256 86cf6587bdd8e270634765e2c05184a9846ddfe23c0c527f1597c27714c0474e
MD5 ef7871187248e94834d312122497759a
SHA1 9ea71c51ba74e76a5a16c877b33e7b27a6afaa2a
SHA512 7d3c59665386278abf0b3ba31bb3b67375432d3f927a32b83304ab0427021c8a1be42f8f2a79c1d305a0dd78e3718275133e2cb0efb207d1e3152a50dca91d4f
TLSH
T11AD0976AFBC2EB55A4012FD6F42C8A30FF7DF820B74C01E1F89920C0606266D44670DA
MD5 SHA1 SHA512 TLSH

Submit Download

Rodux.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\InGameMenuDependencies\Rodux.lua
Size 236B
SHA256 7da067dc7cc7f40797861d5ed7a9d463766f7697dc9334a8371d0f97ddc318b7
MD5 ae5067980f068f5125498e2bbe0eb5ae
SHA1 997bd4f40028f9d85a8d7f092a359222d28031ad
SHA512 95b887d455be9672bcdda3274b95f06cd8350c9aa0f18caeb31fcf43e789baf27889d1eca66ede33601b84a0437bc0fe886cce2ab916eb3e8575a1967dc072d5
TLSH
T1B1D0974AFFC2D31AA4011F8AB0288620FF7DF820B78D00E0F8592084704035C00630DE
MD5 SHA1 SHA512 TLSH

Submit Download

InfiniteScroll.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\LuaChatDeps\InfiniteScroll.lua
Size 260B
SHA256 07cc4c2083e1ccdb65f3aa5886c39dff74639c2f28979753f22c2adffcaba9c8
MD5 351ecf75c6d77dc3faa94bdb63b1ab8d
SHA1 d1c932babdd3f1e912ec9c2d31a979831c40a333
SHA512 de1b4f2b42bd90b0053119be680598cb0c73ee7027161a21a0435d915a28041fe75508577fe03b5dc7a576b8f65334df473618b3480bec5641446eea22a58255
TLSH
T15ED02B49FBC3930765010E46AC584631FE7DFC70F74D00D0B4551850D0406BC04B31A8
MD5 SHA1 SHA512 TLSH

Submit Download

init.spec.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\freeze\freeze\init.spec.lua
Size 82B
SHA256 ab2b7b1ad191519a8824e1acd53cd64a0d54395e36094e18fa45f8daf2439554
MD5 8b01d67f7cc7006a36aaf598939f52a4
SHA1 7fdd59dcbec71451013c237046204b66dd65cdf9
SHA512 447edd4f14493fdb492edadd7ce5f2e1c35e280125d9a606a75aa43e0b0fe6dad652618f202f79b4a1d8a96d0718fe458d03997c8febdf41a57c29af22b94921
TLSH
T1D3A0128C75C2902CF5073360403F40189633E42110804420500C40C188140876013CEC
MD5 SHA1 SHA512 TLSH

Submit Download

FitFrame.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_infinite-scroller\FitFrame.lua
Size 266B
SHA256 fc330a085c635ab21c4f037943611571892ac91e06102f2f3f15bb232d2c4368
MD5 f01ed9c2256bd5d924146be8c88e8027
SHA1 8261e1962ef9ac1a8ce9bc11f38c97ae827443b3
SHA512 066598de28eed6cbd8ee5e40bb2fa2cb3e7b05445f18073492b45cffffa3a2151fa6303d439028555b5627e22d25a3eab7f62b8e9fbf02099010ba67f303c7e5
TLSH
T1E7D02B55F7C2D32458011E9560344E23FEFDF410BFCD01D0F596918061C29AC40631DA
MD5 SHA1 SHA512 TLSH

Submit Download

t.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_infinite-scroller\t.lua
Size 228B
SHA256 d7f269f62bd142a359cac4e1ed66e293e3dc8a829ab8c17c17f81a3c7ff61685
MD5 914999726bd33da9c9e7e51a236959a6
SHA1 6e2181a5def64e9947a0e5091efd20299002297b
SHA512 f4b5a8ebc57d3891c17d5e89b10ef766a9235fdf1b0c43388afd6a8f693358699072068697163db915c2ad4bee2375dae079b8716fbbdb3510668ab75fbba9a0
TLSH
T15CD0974EFBC2C310AC010F8AB42C0520FF7EF820B74C00E0B4994084608026C00B3098
MD5 SHA1 SHA512 TLSH

Submit Download

StartHidingPrompt.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_purchase-prompt\purchase-prompt\Actions\StartHidingPrompt.lua
Size 105B
SHA256 18a22422001b1c07d2d001d18e803f9d2e042b4cc9d95eab20dfa953b002055c
MD5 143617f56b6342101ee19399983e46cf
SHA1 69d71d6dda43eda1a5a8e8a281ce2aaa45004dde
SHA512 10694e6bd0edcc0ef4415cdc89bdb8678af761e5701e8de91588f5c592a67813feef0b9dadebca26557ba70799b28a784904b41d772f76f37c7d695a89f1946f
TLSH
T1C1B092C87C81F2202C0B39C2C0A2C8C66FBA848005064020A85BE0011B621E0068206D
MD5 SHA1 SHA512 TLSH

Submit Download

Cryo.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_roact-navigation\Cryo.lua
Size 234B
SHA256 d619b18d99073d049558a2e8a0aac4b76ee4632dee86e685b1e94b2f24b70d15
MD5 015ad3345180165adbf5e4b33c9f233a
SHA1 0a71c1047c66f31225d6264454bc962781345a4e
SHA512 64ed7e4035b50c24571cff0e2f8226060a976bf78f1c3d6c286e5a5bdae21324f002373df80d8fbabaf1927e61d31b2ea49a655400d6c5fefd697a9d71edf20d
TLSH
T1C7D0975AFBC6C314A4010F8BB4684530FF7DF820B78C40E0F46A5080604225C08630D8
MD5 SHA1 SHA512 TLSH

Submit Download

Roact.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\LuaPackages\Packages\_Index\roblox_roact-navigation\Roact.lua
Size 236B
SHA256 18d8a74c775718fc0b9bf8102e73d948a2461d8ee45a6621658acd8ee5832947
MD5 78f7caae2af81d45990ee5c73c0e6cde
SHA1 2b0a63d6575942fe7c34071ed314b32b5190c57a
SHA512 ab95d81320a39220f3168d9fde0dca419e15ec4d961210310b115e78824b0014cd3e1c19c615a7234d1d8017764e882bc2e6ebf7718a43a7ad2f42ee3621bd0c
TLSH
T188D0974EFBC2D318A8011F9AB0280621FF7DF820B78C81E0F4995180608029C40630D8
MD5 SHA1 SHA512 TLSH

Submit Download

cs-cz.lua

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\InGameMenu\Localization\Locales\cs-cz.lua
Size 693B
SHA256 4a43d4888b0a6ab810743f8453ee50bf7e64588e9bb0a956284e2a8c7f6c9e26
MD5 d5ae708edf351d970ecb7e043b08c42e
SHA1 f920bfe71f48ab698fa012bbd8824f0703996fcc
SHA512 b8362d16d209a0b501b11c3e88dcf25174ebd94a1a2b0bc4775964de24fb48ccbef30425a6b0775310e7dd8c42206624d20759e04dff9a4f4d69fa8753c2ee21
TLSH
T19101C0F31EC08B101613D7516988E011EC318CA50766C395B90E51CFB9D7958334DDB9
MD5 SHA1 SHA512 TLSH

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\InspectAndBuy\Models\.robloxrc
Size 86B
SHA256 9239a058ac088e6b2203a60a5fafa41c0357bb66b831395c8a327506ebfb468f
MD5 bfeeec6f5059a3d7926c43fab20d0e2d
SHA1 b021b858e268ef30264b37be4c5ed46cd4d081ba
SHA512 c512e555a4b5a139641b51c63b51e79fa49ba8966aec24923c7c9559939681e44379bdcbd4162c82f1f7ace3f14ffe8a92333e8d294ab54163e12679b47f1b5c
TLSH
T17BA01221C11ECD57F1C4044698649000402410F036481B7B8781C004C1CEC21122018A
MD5 SHA1 SHA512 TLSH

Submit Download

.robloxrc

Path C:\Users\Admin\AppData\Local\Apexia\Client.new\content\scripts\CoreScripts\Modules\PlayerList\Actions\.robloxrc
Size 45B
SHA256 82269088b366adf1a905b5714e368bbb65d7f532e0ceecfa0554ce5bb149b592
MD5 f4a3ac1a135ba37d32fa1d491c3b0540
SHA1 35aaf1296a42bd90f877efccc01168d7c2443c61
SHA512 d37a16befb68c3ecffd866d0b377c03f4e41e2dfaff797b98a58efcb9ac3e3137c38bbc464f38995c005c3fa3d3dcbf1eda5d2d43c196192bb3da4d213520944
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads