Analysis
- user interaction
yes - max time kernel
149s - max time network
125s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
- submitted
27/10/2026, 07:47
General
- Target HydraLauncher.exe
- Size 1.3MB
- Sample261027-jmlzaact3p
- SHA256 cfa057b88d16a33d72995430e3fffb164a3908383a57fa5668301abc06fdb1f5
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HydraLauncher.exe"C:\Users\Admin\AppData\Local\Temp\HydraLauncher.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5520-0-0x0000000000FC0000-0x0000000001112000-memory.dmp
memory/5520-1-0x000000001E4B0000-0x000000001E672000-memory.dmp
memory/5520-2-0x00007FFA7B1B0000-0x00007FFA7B1E1000-memory.dmp
memory/5520-3-0x0000000022C80000-0x0000000022CD0000-memory.dmp
memory/5520-4-0x00007FFA7B1B0000-0x00007FFA7B1E1000-memory.dmp
memory/5520-5-0x0000000023B50000-0x0000000024078000-memory.dmp
memory/5520-6-0x00000000205C0000-0x00000000205D2000-memory.dmp
memory/5520-8-0x00007FFA7B1B0000-0x00007FFA7B1E1000-memory.dmp