PrismRelease[.]rar

resource
unpack001/Prism Release/Prism Release V1.3.exe

PrismRelease.rar

SHA256 0ffc383067c74a8ca5576ed940e77e6adb0ec979294b1c12746d541e51558743
MD5 d84fd4e39c4ae6788b52c3497616581e
SHA1 e7e3def6802f49d7ffb5ff3e20322b89f2451028
SHA512 e202670e745e289efba7904389a20120c1d1f7b94c8f7fb42a13c124d084cdd1d21547469d7d56fa0ad6cd59c92cb694f7cd3f2600d9a7f5a5eee319a3e296b1
SSDEEP 98304:/RQkPbG+jiIeu1NJyxpMHuDQHhl/jBOy/NICN2PqvAP+XU1RWjxVVJj:NzG+OITAxlDkl/VNIxqoPeU1RWjx5
MD5 SHA1 SHA512 SSDEEP

Password

infected

Prism Release/ByfronHook.dll

SHA256 3811858da4b1f5e7f40d1237d7189ddca3989fa0d7b07e87c538f92975b893d2
MD5 4e3e92823caeac1203beaa5a35d6dafc
SHA1 893b591d46c39e817052cd05ec969fea74da4233
SHA512 0490e800f1e5c9b38b6c9b56616290f3a7214179e6d993214e3dd742d44d1d669fe5073b5a121c588c05f3e7c0ec576798236ee94e1a9b37e1d980d1969c9d33
SSDEEP 384:pPLl4JbDL8XQZW8LN/4pvuBUyHVz0Ad29DtSLKZR2CF/9+8ADu/TyZdEPLe:pPh4yQZW8LNuAUyJl29DtSLKZR2m9+8m
MD5 SHA1 SHA512 SSDEEP

Prism Release/Prism Release V1.3.exe

IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
SHA256 af714718f7ad3bcb60321daf63f23e7f2a586903baea8014d5f27dd65d4a9413
MD5 7e1841390354f79ea0a211457dded684
SHA1 6c500478bd165f741ed469a571b94fd159aa03a0
SHA512 6c0f54c9c1e794c3e01d3725bf1c9e654254f6a9068dc287ed7b11ee7abc226307712a62d3ac034e38b993e6e19c12f8593bfbf9cab1c5df4f49123187cc4ca5
SSDEEP 98304:LpyqiI/na1r1jg/hNMNNrrpbeRB45YenyHCaCP9iKIA20Fh1SDi3GoYm:Nr/na/OGLrrpqR25FyHCaeXhFyDi3GoY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

5329

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Prism Release/assets.dll

SHA256 672cb16128dea50e21fd2d98889e2d6a2264b654304a3f4248ebdf4c546f734a
MD5 bcc0b07de0a24f9701fc97d154ecd660
SHA1 cb5ba3b790cee940b4d18ff78e5a6cd71bdad47d
SHA512 18959767986401bc877d30416e550c55e97c158f674b8f76dc9af117494e65e11d6000521f72be93c193ebd38f84d1b9578386c24911fda97507277f06ebd8e4
SSDEEP 3072:rN505WN505WN505WN505WN505WN505WN505WN505WN505m:rNJNJNJNJNJNJNJNJNB
MD5 SHA1 SHA512 SSDEEP

Prism Release/bin/autoattach.dll

SHA256 672cb16128dea50e21fd2d98889e2d6a2264b654304a3f4248ebdf4c546f734a
MD5 bcc0b07de0a24f9701fc97d154ecd660
SHA1 cb5ba3b790cee940b4d18ff78e5a6cd71bdad47d
SHA512 18959767986401bc877d30416e550c55e97c158f674b8f76dc9af117494e65e11d6000521f72be93c193ebd38f84d1b9578386c24911fda97507277f06ebd8e4
SSDEEP 3072:rN505WN505WN505WN505WN505WN505WN505WN505WN505m:rNJNJNJNJNJNJNJNJNB
MD5 SHA1 SHA512 SSDEEP

Prism Release/instructions.txt

SHA256 a4473290aa30ca151cc1ff1ea3a1d76915a1975f8461e14ae43a4ad29296bd95
MD5 511f8a515b7613bbb254e78afdcb1288
SHA1 c47040632ca1c2d55d08c1faea3f77f932aac008
SHA512 4613866fbfa63191c22700e72bb0c54cc20f043fce3a44bdda262f5803d0d02977df8f18a5ac75cb9e0b8b25cb9ee17ec9f97a9f648da7c7a484d9b63c0f5915
MD5 SHA1 SHA512

Prism Release/license.txt

SHA256 a19d58aaab15c4d0019e569d1c073d1b5286fdd37dbeee7a58a7d1ae76045ae1
MD5 0b09566254b011d989decf0e23a902eb
SHA1 3ae5cd6be73daf418b8deee9c865cf78225838c9
SHA512 4e22e58f925879306261e5993039e1d84d87f8fecc0f9fdad534da55b6fd22be77e622a4077d8d521f7734e5535f66853d581155987e2f3607e2d386938c218b
SSDEEP 192:uEwjuKsgA4+XYdXjA+okS63vZBCSUziJm:eNs8+QRVxBRU1
MD5 SHA1 SHA512 SSDEEP

Prism Release/workspace/Saved Scripts.txt

SHA256 d2d792f0d9bdb064f665174877454ea83f32aa0a571d223c062fb2107352481b
MD5 9aab6209b47a96431718754d4bac5bea
SHA1 671ae2fdf7f41befc2b7fb53a3902cd2d2f35b7f
SHA512 860afec17d9e2c88df27042ad0b027c9021ce08b737d7cae39585d3398fd6ee551f81fe0f145aed90a30bec15a07d1e0731cce9c5b5db7141a6cedd42a3a1bd1
MD5 SHA1 SHA512

PrismRelease.rar

Prism Release/ByfronHook.dll

Prism Release/Prism Release V1.3.exe

msvcrt

shell32

kernel32

generic

Prism Release/assets.dll

Prism Release/bin/autoattach.dll

Prism Release/instructions.txt

Prism Release/license.txt

Prism Release/workspace/Saved Scripts.txt

Sharing

General

Malware Config

Signatures

File Explorer

PrismRelease.rar

Prism Release/ByfronHook.dll

Prism Release/Prism Release V1.3.exe

msvcrt

shell32

kernel32

generic

Prism Release/assets.dll

Prism Release/bin/autoattach.dll

Prism Release/instructions.txt

Prism Release/license.txt

Prism Release/workspace/Saved Scripts.txt