Analysis
-
max time kernel
124s -
max time network
169s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
09/03/2024, 20:25
General
-
Target
prismlauncher_updater.exe
-
Size
719KB
-
MD5
e0bad364bcd82a859df7855d0bac1811
-
SHA1
e87fbff416cf3fb667345c5e8ef49abf3bd5da24
-
SHA256
da9b8dee843e3448dee6ea5efe045f3bab5f12beea77269f1132de57e2dbbbd9
-
SHA512
528143ae7b50d5cad16d6f458f4cf60e639ee30b8c7924fdb33200f48d30a1bb4524927f2cd338f5a48fde636d6db4ed41b2b8c9ff7f977f51404494735961d3
-
SSDEEP
12288:lah1mPo7YtzgqXhKRts8BrRDTvXOY71+14K597dn/MopZmH8GV7zv4injV4uL:2wPo7Y9gqRinBrtrjkcjVr
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\prismlauncher_updater.exe"C:\Users\Admin\AppData\Local\Temp\prismlauncher_updater.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\prismlauncher.exeC:\Users\Admin\AppData\Local\Temp\prismlauncher.exe --version2⤵
- Suspicious behavior: AddClipboardFormatListener
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004DC1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.2MB
-
Filesize
64KB
-
Filesize
6.2MB
-
Filesize
9.8MB
-
Filesize
64KB