General
- Target RukiaPlayerLauncher.exe
- Size 2.3MB
- Sample261026-vd8mgafs71
- SHA256 be92bd2f1719a42801efd678875061c824e21be01aec7ce9bf645585cb1fce7f
- MD5 1fb237b9e506b3ba5f7cbadf63bc8205
- SHA1 078466d3c632a7172551b0e9444e981ee2c819db
- SHA512 e0278f60819cc74d0daf44a1effe785209a052fc234106c9777f281df1a69e945c25504d79cc1a1c2f27379a0abece8434d324b8d21f5b94f657e04b30e5cd80
- SSDEEP 24576:NT3iR7BS6yRaIEcMcTGgPFpM3ydgtdVIwfslqj+Kr7lfux9qOnEK24GjqGlJ:NQVcMcTGYC3ydgtDZ6oJ
- TLSH T1D0B50911ED8F6AD8D461C2F9F425859C41FFAC21742161CA62883EC99AB3E43F724D7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RukiaPlayerLauncher.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
RukiaPlayerLauncher.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target RukiaPlayerLauncher.exe
- Size 2.3MB
- SHA256 be92bd2f1719a42801efd678875061c824e21be01aec7ce9bf645585cb1fce7f
- MD5 1fb237b9e506b3ba5f7cbadf63bc8205
- SHA1 078466d3c632a7172551b0e9444e981ee2c819db
- SHA512 e0278f60819cc74d0daf44a1effe785209a052fc234106c9777f281df1a69e945c25504d79cc1a1c2f27379a0abece8434d324b8d21f5b94f657e04b30e5cd80
- SSDEEP 24576:NT3iR7BS6yRaIEcMcTGgPFpM3ydgtdVIwfslqj+Kr7lfux9qOnEK24GjqGlJ:NQVcMcTGYC3ydgtDZ6oJ
- TLSH T1D0B50911ED8F6AD8D461C2F9F425859C41FFAC21742161CA62883EC99AB3E43F724D7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1