1c449fb0e6f307c4a01d988f1aca7952a8efa80c7a8f20f03fced5c42a7f4f53

Resubmissions

02/11/2026, 23:15

261102-28xa9afz3n

02/11/2026, 23:11

261102-259r6sdx5x9

02/11/2026, 23:04

261102-22fd6axvew9

Sharing

Copy URL Twitter E-mail

General

Target
Aura-Launcher-Setup-1.0.1.exe
Size 90.6MB
Sample261102-22fd6axvew
SHA256 1c449fb0e6f307c4a01d988f1aca7952a8efa80c7a8f20f03fced5c42a7f4f53
MD5 ddf48c75911c13b411be8bd562e65f3d
SHA1 d919ed1b2732772fcccd87792a320a1ca207563e
SHA512 954481ded04c066647396e7cd4562ab8601781c6abe2d4a9775390d6f4b922898bc9c4d58af983d6b90b0881e8a0c024e48f124b5daef449e0ff3322b5bf544f
SSDEEP 1572864:HV2um4Ndc2jv2V20qs86QOLufg5CFZtJttVyt7UQnhoD5+NEkY3itjWnmKOF:HVTm4Pv3t/quACH1yVN6D0EkOix8mN
TLSH
T1D0283350B2AE3C80D2D18C3F2A4C16EB597D7361DF53B90C463622BC96E6BA9D3641C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Aura-Launcher-Setup-1.0.1.exe
- Size 90.6MB
- SHA256 1c449fb0e6f307c4a01d988f1aca7952a8efa80c7a8f20f03fced5c42a7f4f53
- MD5 ddf48c75911c13b411be8bd562e65f3d
- SHA1 d919ed1b2732772fcccd87792a320a1ca207563e
- SHA512 954481ded04c066647396e7cd4562ab8601781c6abe2d4a9775390d6f4b922898bc9c4d58af983d6b90b0881e8a0c024e48f124b5daef449e0ff3322b5bf544f
- SSDEEP 1572864:HV2um4Ndc2jv2V20qs86QOLufg5CFZtJttVyt7UQnhoD5+NEkY3itjWnmKOF:HVTm4Pv3t/quACH1yVN6D0EkOix8mN
- TLSH
  T1D0283350B2AE3C80D2D18C3F2A4C16EB597D7361DF53B90C463622BC96E6BA9D3641C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery ransomware
- Renames multiple (267) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Aura Launcher.exe
- Size 168.9MB
- SHA256 458900120b2c8e6158e7a9eec7cca98163100b0b06d4342087317fd8e5cfb421
- MD5 1e5f2af47a450c8af5d9bb821b133bac
- SHA1 9b0604b60a6bfe57f614d68c3710c67ba483825c
- SHA512 954137fda7fb83f8ad477c28bdf9968157838d94a6d4f3d6dbf45304e1a4f5cce7552544500792c8aadef36096a4ef38ab43004600a09455d729010229762ae0
- SSDEEP 1572864:xMw5SJUgPbksdRW8YcrVEGPv/fNsYCdwl0KWCfLM14GYoQt0imGWgyTpQGa:tunRK2agyVQ1
- TLSH
  T1F0888C13E29A50D9E00DD1B187879233EA72B84A4728B6DF2B5447563F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11
- Target
  LICENSES.chromium.html
- Size 9.8MB
- SHA256 c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb
- MD5 0ff177fbf2a3873dd573077840e0b8f5
- SHA1 03d06bc7cd894399a5fc6600a0210f6e3226f92a
- SHA512 3264becd3103c905ab7f9cc034320885f18cbecaa45f582a4a9567ca4bcd620d64dc59fb03532964e775c35f07928a4497f5529cf1b9dc18379e4e9cff02ff8a
- SSDEEP 24576:K+QQM6Ms6x5d1n+wRhXe1BmfL6k6T6W6b6f6V6GeGj/3BIpx:LUzeGdY
- TLSH
  T134A6A52F7B48037706C642627B8BA5CAF21E903F3B561654344CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12 behavioral13
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  ffmpeg.dll
- Size 2.6MB
- SHA256 18b1f088c7a1261c5fedc46eec98f34e79655128110a6f6c0b9bf62be22dbc95
- MD5 7826cf6f81ef54e9fece6a9d5a0b7bba
- SHA1 17f0ace5f39dc276790ff4f427f3112de9ae9baf
- SHA512 1db8e1fb6da58401d384e26e9353e5461ccb8d5a5d98fe1cdd43455d3813358b3fcc010d30090f78c59d739a4bfd84a77a0c4eaffa4f270460964301d5c6f4db
- SSDEEP 49152:VC8lp7/1UNZrhOP9YJQHUOWwGen6yfW0OfShPdb5x:ChOVYJiUOWwQaPB
- TLSH
  T1F4C5AE02E6D904DDD02DC0348B9B9223F63174468B24A6DF1A91CA253F6BFD46E3EB75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  libEGL.dll
- Size 469KB
- SHA256 76efadca4ef6d2abe6ab3701b4071e04470eebfeed8d8d22c7252683bcbb37b1
- MD5 f8b7a8587b0826f969b2ccddce77879d
- SHA1 028af2adc8d467fab7d9d1ed620dffcb9a4bf3d8
- SHA512 fa7b8903aae02f57548754ff6ed8ba8be35e4b18a2fb06cfb9246a0c67105650f08cf9284521a291d387e5216e32533825a4a41d7260a4d80a27c9e35577d57d
- SSDEEP 6144:DmfOX/zRR8yWTDLMoqbAIbqkpXy0/KQPJVIJAG:aczRSyWTDY6IlpXy0/3hcH
- TLSH
  T13FA48C1177D444B9E06BC134CA534642EE76B8960F65FADF02A492392F7BBF85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  libGLESv2.dll
- Size 7.6MB
- SHA256 150a02e43426a0886f023e88cd88454fb0e78696ea3881347a6256920c7a02ba
- MD5 c732c32f5f2f8736f9141de29cdc2a9b
- SHA1 d4cfc6caba27f21b75eca36d7e4b5145c7eea7d8
- SHA512 a55a09f63cb1c46f31e24f42049c8374f6adef49c6a69da136b37807efdb912730d63f712035b0214688ae5b86f02f828b9ec326ccc9b4fea65227ca1292cbe2
- SSDEEP 98304:OlaVNd6hP9OPvwfWm6sGnoDgCXm3o7KXy:dClGwpvGngCuK
- TLSH
  T1C4867B03F29640D9D04DD2B59B4BA223FA35B8850734B6DF269413253F7BBE06B3AB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  resources/app.asar.unpacked/node_modules/bson/etc/prepare.js
- Size 615B
- SHA256 e602ec2a076ed1d558288fab0fecf6eedb1da2a00e6184203b6788dade4b6821
- MD5 03578ed6a118f1207d8153d75a565dc3
- SHA1 196c32e56be29b0166ee413bd7fefb36aeefeddd
- SHA512 6223beb8485d85ba5ab93d4b832a17b50176602333a61f2db260d0338f85a772e3cff12c61ce24877c1098c4e67bb2b8ef7bb4553bbbcd0c60828b40155d8aac
- TLSH
  T191F0023647FB227E12F01B9E590D224AB3DAC0322204FE6D78CC84697F4301E1376975
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  resources/app.asar.unpacked/node_modules/bson/lib/bson.bundle.js
- Size 172KB
- SHA256 e9ded767e6f1832f3b2d0a7f086b98aafcb0d0cb439f14921b659e528c04b001
- MD5 ed815d6d552bb135eb3454bfe7788311
- SHA1 466e501c0e3c52af87ea1afa9324aefec911ef91
- SHA512 5d1807b960f72650c1b62bb2bc0a863cb46852f98a51ebc5b83af360080fcb61630711369af123411e0123a0ce69e5269a96b4651061a4c337d75ee9a8ad5fab
- SSDEEP 1536:+zcgq5Usrs4/q1BnLvzuZg4WwTJrGMVkGJXAs5x4qUqeN22oXqMbyrbGvn:+zcgq5Usrs4/q1BnLzuWOJVLZZ
- TLSH
  T1810440482DE31161465370BA0B5F980DB23A9413791CDEAC7C1C56A09FC1978DBFEFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  resources/app.asar.unpacked/node_modules/bson/lib/bson.cjs
- Size 172KB
- SHA256 64e5de269bbcdee96f2bebb57cc9729b72aaebde02d832005872b7e575899284
- MD5 1ae17d857acbe19d1f8946188a1b08bd
- SHA1 f8080a6d6a931bc5a7d8bcdcf3830f1faee6f334
- SHA512 4e4f546e09c60625b73722b94329e5e965054594dc6d3ec62a7910320b0b7a7ee6652ad9066591b6c09c5f23d3a360b5fdb70c46bd60837c8f6569a785a13017
- SSDEEP 1536:Xzcgq5Usrs4/q1BnLvzuZg4WwTJrGMVkGJXAs5x4qUqeN22oXqMbyrbGvk:Xzcgq5Usrs4/q1BnLzuWOJVLZ6
- TLSH
  T1AF0440482DE31161465370BA0B5F980CB23A9413791CDEAC7C1D56A09FC1978DBFEFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22 behavioral23
- Target
  resources/app.asar.unpacked/node_modules/bson/lib/bson.mjs
- Size 172KB
- SHA256 df73a0b1bac48a8bfe59eb0d98d8ba3d06c61d68cc7e44a4073f0679112c92bc
- MD5 0474f506e9999bb1cc9357bce9b656e5
- SHA1 99e99ff1b1c66dfa705d95fc83ebf2fe1bc3f022
- SHA512 ac1999c563320ea036f7a4761095bbec7a7cff1b793cebec88b37126983d8aeb2cea52c5180c88b1325deb49099b768a3fc4320d3822d7c34a1fa02bdafa4d8f
- SSDEEP 1536:Bzcgq5Usrs4/q1BnLvzuZg4WwTJrGMVkGJXAs5x4qUqeN22oXqMbyrbGvI:Bzcgq5Usrs4/q1BnLzuWOJVLZa
- TLSH
  T1570440482DE31161465370BA0B5F980DB23AD413691CDEAC7C1C56A09FC1978DBFEFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  resources/app.asar.unpacked/node_modules/bson/lib/bson.node.mjs
- Size 172KB
- SHA256 0606787417a0137d224895189e3dde955429743a9a775143a7c68b2bebac2423
- MD5 dd4d149e347d9d60ec0dda60b92b61f1
- SHA1 86c134fd2011613f3cef4b7b49f26f2a1b39a383
- SHA512 87bdeb222b05775c5d13d722427288e443976a0bddfe5c1db889bc4bbdb30ba101974a9eb8f6934760da52e661336682a4e8abd428569edd559ea1f04e51d708
- SSDEEP 1536:ezcgq5Usrs4/q1BnLvzuZg4WwTJrGMVkGJXAs5x4qUqeN22oXqMbyrbGvi:ezcgq5Usrs4/q1BnLzuWOJVLZU
- TLSH
  T10C0440482DE31161465370BA0B5F980CB23AD413691CDEAC7C1D56A09FC1978DBFEFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  resources/app.asar.unpacked/node_modules/bson/lib/bson.rn.cjs
- Size 173KB
- SHA256 4fa00d0dd795032629edf8f5aa0a1f36127446a0ac55f14b1d031ae866a85da6
- MD5 2ce156b7cf3cf2b7d1ff5f7dfb1e0383
- SHA1 a76a097c3077294bd9969a41036893a0872fb286
- SHA512 708e6ba9535f957157a3df4262a6b971dd8cdd88520cd23dbe83f455357c8badfc3c71bc5d29f6a0f1cfb94d6b1e511172a5f7c14f0aa78330003cb142e6b829
- SSDEEP 1536:/Scgq55srs4/q1BnLvzuZg4WwTJ0GMmkGJXAs5x4qUqeN22oXqMbyrbGvO:/Scgq55srs4/q1BnLzuWRJmLZc
- TLSH
  T1D00440482DE32161465370BA0B5F980DB23AD413791CDEAC7C1C56A09FC1968DBFEFA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  resources/app.asar.unpacked/node_modules/bson/src/binary.ts
- Size 23KB
- SHA256 6a3a52196e27272208376797bb9f7217b43f2591e99346cb1b36e4265b1c3303
- MD5 fa614f09504d9a4e5cb01787fab309bb
- SHA1 b63b53a22d38617de76bf13c1aca9a5d8a9f4eb1
- SHA512 19a2674421a556b38d6a87638842c9d50f4e097b429250e0f1382a7adb9c4e9de7b7454af19ae5cedf4635dcdf594bd745c645403297c072512b7f791475afba
- SSDEEP 384:KpDxQWjwCp9+OLb+FKJfhamzaCVlIDx3MbpuXaEKtpruvJMjGT0nvCZZ:Z+pJbf1i2ZpjLK/
- TLSH
  T1FDB242406EE261B286A330B55BDB7089F234906F766C8D8C7C9E05B06F81774CBF6AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30 behavioral31
- Target
  resources/app.asar.unpacked/node_modules/bson/src/bson.ts
- Size 7KB
- SHA256 86c61329d10d3e3f11b75ce4046f06f877c2f84476779e0ad1e6fabeb07cc58e
- MD5 a0fb6b7518f386049747c7f8cf5d506d
- SHA1 43b43b79d0914625df7692ad1a366580cffc84b6
- SHA512 113b2b6c9af87ead5bd7776271f4d6c4839002e59337812f293d8a7842e0250894444adcf7fb294609b0d419198a1708aaf92b78853910eda62e97ac1729b4ea
- SSDEEP 96:OESY51t/zg1sZRHTubmMcYN0tpE9tIcbQymzBlbjBB7GQK1shX4Xfqj4hNWtxi+i:V2cTXoacOoc2AAC/tyue
- TLSH
  T111F1525E1D029B22445331E1166ED485963182337E66BCC046D68FB85FC94ECEBABF8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Renames multiple (267) files with added filename extension

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32