Analysis
-
max time kernel
139s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
29-03-2024 18:29
General
-
Target
prismlauncher.exe
-
Size
9.7MB
-
MD5
337e87e1117573b52d7a069a2bec9935
-
SHA1
52060abc875a8cb7aa08076b503f2aeaf3dd4d89
-
SHA256
6651a644ecbfa74355c25036986efe7ac48002c7d6d54b9ff1eb2db5f7fd8bf3
-
SHA512
638312070c05b33c979e95264f07168e494a854068172c414d2066e9dc7fe766a27d9fae7437060cf5d8c25dfd587d7b066d88a09d6dd32f68b8bd2fc88b6aa7
-
SSDEEP
98304:zpPOVXkPVGiWnYmryIHDno6TRlUNxOKsgCfVT:z1Gi0h06gxyhVT
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\prismlauncher.exe"C:\Users\Admin\AppData\Local\Temp\prismlauncher.exe"1⤵
- Checks computer location settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
30B
MD5a6dc16331f06bc5831e5ddc9799284ec
SHA1d344f83d549df8c3e2c959182ba37f8c81d885a5
SHA2569da99b49301ba83c33387e75d2028185562479e677b6afb110b4f8b098465807
SHA51243e498eab5c6f9b2f70c01e0abd4e63edb2651e498f267b53c7f62f2ef9c1eb68fa4783967fdba1880722a8bcd6e58065108f42773f0f47c04c9e54e809b1c14
-
Filesize
66B
MD5f41cf553570ef6738bdb00de7cffac64
SHA10f98eedd7af1520add0e2d6c4371fc3d30a9964d
SHA2564aa181d5fe678a28412e2659466047a9620f888ac938a2670734928dee66d48f
SHA512f63b061ec9dda04c6f0e04c1c74b6ac75e63c6343ade721bccddd539f8f65575001d7b42e1d1fc521d8c51acf35dd22b81014a47fb9976b64f95005b904587df
-
Filesize
9.8MB
-
Filesize
6.2MB
-
Filesize
64KB
-
Filesize
64KB