Overview

overview

8

Static

static

3

claude_launcher.exe

windows10-2004-x64

8

claude_launcher.exe

windows11-ltsc_2024-x64

8

dartjni.dll

windows10-2004-x64

1

dartjni.dll

windows11-ltsc_2024-x64

1

data/app.so

ubuntu-18.04-amd64

1

data/flutt...ker.js

windows10-2004-x64

3

data/flutt...ker.js

windows11-ltsc_2024-x64

3

flutter_lo...ws.dll

windows10-2004-x64

1

flutter_lo...ws.dll

windows11-ltsc_2024-x64

1

flutter_windows.dll

windows10-2004-x64

1

screen_ret...in.dll

windows10-2004-x64

1

screen_ret...in.dll

windows11-ltsc_2024-x64

1

tray_manag...in.dll

windows10-2004-x64

1

tray_manag...in.dll

windows11-ltsc_2024-x64

1

url_launch...in.dll

windows10-2004-x64

1

url_launch...in.dll

windows11-ltsc_2024-x64

1

window_man...in.dll

windows10-2004-x64

1

window_man...in.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    ClaudeLauncher-1.9.0-windows-portable.zip
  • Size 14.6MB
  • Sample261027-3wkblaws8q
  • SHA256 4737c0b2776bb4631ef6a61c9f9a68ebea45a36f8a8958bf1adae9bdafbb673d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecutionlinux

Malware Config

Targets

    • Target
      claude_launcher.exe
    • Size 125KB
    • SHA256 1be9e53ae94c6af7ec5f6f50b46f9126064e6064e12ec6956d546d123e02de88
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution
    behavioral1behavioral2
    • Target
      dartjni.dll
    • Size 57KB
    • SHA256 5ef562ea89119e0c10421c6793c0030aaeeaa6388242204b1e8ca37966a9f9fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      data/app.so
    • Size 7.6MB
    • SHA256 a7c6dd251fa83183d55196780d6bdd790d81f6fea29784ff06c451397e1af699
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5
    • Target
      data/flutter_assets/packages/flutter_local_notifications_web/web/notifications_service_worker.js
    • Size 3KB
    • SHA256 566f47dccc0f417f0164a3d0852334c340d0941472af43fc65ee50a314555058
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral6behavioral7
    • Target
      flutter_local_notifications_windows.dll
    • Size 88KB
    • SHA256 c6cc462f1311127423aa953c708e76727b214bb053de540152e30c57323a9ffc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8behavioral9
    • Target
      flutter_windows.dll
    • Size 20.3MB
    • SHA256 7f04e026b1639b7594e1b6be32844547984da484d47394667e66f0288c83bd6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10
    • Target
      screen_retriever_windows_plugin.dll
    • Size 117KB
    • SHA256 c638316fd2e720bc93b64f06d4edd80b5ea2bd746446ddd6adffc9c17fa7a8e4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      tray_manager_plugin.dll
    • Size 104KB
    • SHA256 188d06f7cdca09eac2ab4b12856ccbc46c701f25c3551511c3b0222293fa578d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      url_launcher_windows_plugin.dll
    • Size 96KB
    • SHA256 1c4320070642b8da159d3a9258f02c1523fcf8e568183dac7f2065db05774c80
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      window_manager_plugin.dll
    • Size 127KB
    • SHA256 da8fefff783e5077f17ec7e2daadd9fef1916a294d7ed47799cd12408d23fe64
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v16

Tasks