Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-05-2024 22:38
General
-
Target
PrismLauncher-Windows-MSVC-Setup-8.3.exe
-
Size
18.1MB
-
MD5
d03e25e914d36f2375c28ed0ee277432
-
SHA1
fc9b209ac8272e91c81df60cc97c4cbcada6f149
-
SHA256
c2fc663f23d734380807de7b7f5897376cdc1e3cd547d51ab515a3a4e72ab073
-
SHA512
f94b595188b2b1a8f6bf5f30a0d1d8fb1dd57e7e66519a77e9dd6c79ad606a585b134fb6b9a8efb301afe91e117b4d8b7551133a6d658e0eb399ea18e191d6c3
-
SSDEEP
393216:CNnQQvlCZznocxWjGHuoeoKn/ZwtI4Np+uH5Xw7nxQPY1DrnQDtZqw2MQjgXjc:CNnQQvMBocxyGOo/Ixb4v+uZjqPQDtZa
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PrismLauncher-Windows-MSVC-Setup-8.3.exe"C:\Users\Admin\AppData\Local\Temp\PrismLauncher-Windows-MSVC-Setup-8.3.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
\Users\Admin\AppData\Local\Temp\nso2425.tmp\nsDialogs.dllFilesize
9KB
MD51d8f01a83ddd259bc339902c1d33c8f1
SHA19f7806af462c94c39e2ec6cc9c7ad05c44eba04e
SHA2564b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
SHA51228bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567