Analysis
- max time kernel
149s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/11/2026, 01:49
General
- Target mclauncher.exe
- Size 9.0MB
- Sample261102-b82mvsdh52
- SHA256 87bc5566a3a9a10e76e6ecda710f7343cdf535db6909959c93039684f9f57e32
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\mclauncher.exe"C:\Users\Admin\AppData\Local\Temp\mclauncher.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe" -version2⤵
-
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -version2⤵
-
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -version2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2012-46-0x0000024819720000-0x0000024819721000-memory.dmp
memory/3776-8-0x000001E018F50000-0x000001E0191C0000-memory.dmp
memory/3776-18-0x000001E0176F0000-0x000001E0176F1000-memory.dmp
memory/3776-19-0x000001E018F50000-0x000001E0191C0000-memory.dmp
memory/4640-22-0x00000224DA010000-0x00000224DA280000-memory.dmp
memory/4640-32-0x00000224D9FF0000-0x00000224D9FF1000-memory.dmp
memory/4640-33-0x00000224DA010000-0x00000224DA280000-memory.dmp