Overview

overview

7

Static

static

3

PrismLaunc....4.exe

windows11-21h2-x64

7

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...rd.bmp

windows11-21h2-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

Qt6Core.dll

windows11-21h2-x64

1

Qt6Core5Compat.dll

windows11-21h2-x64

1

Qt6Gui.dll

windows11-21h2-x64

1

Qt6Network.dll

windows11-21h2-x64

1

Qt6Svg.dll

windows11-21h2-x64

1

Qt6Widgets.dll

windows11-21h2-x64

1

Qt6Xml.dll

windows11-21h2-x64

1

iconengine...on.dll

windows11-21h2-x64

1

imageformats/qgif.dll

windows11-21h2-x64

1

imageforma...ns.dll

windows11-21h2-x64

1

imageformats/qico.dll

windows11-21h2-x64

1

imageforma...eg.dll

windows11-21h2-x64

1

imageformats/qsvg.dll

windows11-21h2-x64

1

imageforma...mp.dll

windows11-21h2-x64

1

imageforma...bp.dll

windows11-21h2-x64

1

jars/JavaCheck.jar

windows11-21h2-x64

1

jars/NewLaunch.jar

windows11-21h2-x64

1

jars/NewLa...cy.jar

windows11-21h2-x64

1

platforms/...2d.dll

windows11-21h2-x64

1

platforms/...ws.dll

windows11-21h2-x64

1

prismlauncher.exe

windows11-21h2-x64

1

prismlaunc...nk.exe

windows11-21h2-x64

1

prismlaunc...er.exe

windows11-21h2-x64

1

qt.conf

windows11-21h2-x64

3

qtlogging.ini

windows11-21h2-x64

3

styles/qwi...le.dll

windows11-21h2-x64

1

tls/qschan...nd.dll

windows11-21h2-x64

1

Resubmissions

05-09-2024 01:43

240905-b5l31a1arj 7

05-09-2024 01:41

240905-b38h8a1amk 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PrismLauncher-Windows-MSVC-Setup-8.4.exe

  • Size

    18.1MB

  • Sample

    240905-b5l31a1arj

  • MD5

    69bc5aec4f40f1cd760f0fa8a1b650f0

  • SHA1

    d8156098ebe7c38b6e3d2aa6b408d89bc75dffb8

  • SHA256

    6cbbfe0860d7c601d7c179840ebbf2c65009382419d539ab2d11db91c6ea1dd7

  • SHA512

    ce5b0f27b99e838af2a2cdb5cc569ca72e5d83c2f81d10a69a60389367d234455119dc395667c1530d12314eb998006d47e7f1cbfe336d1e249f04ac5e88b44c

  • SSDEEP

    393216:t0eFxWTics3YkZls45LKn/ZwtI4Np+uH5Xw7nxQPY1DrnQDtZqw2MQXgXwC:tHxWTiTYko+LIxb4v+uZjqPQDtZ3yXgR

Score
7/10
discovery

Malware Config

Targets

    • Target

      PrismLauncher-Windows-MSVC-Setup-8.4.exe

    • Size

      18.1MB

    • MD5

      69bc5aec4f40f1cd760f0fa8a1b650f0

    • SHA1

      d8156098ebe7c38b6e3d2aa6b408d89bc75dffb8

    • SHA256

      6cbbfe0860d7c601d7c179840ebbf2c65009382419d539ab2d11db91c6ea1dd7

    • SHA512

      ce5b0f27b99e838af2a2cdb5cc569ca72e5d83c2f81d10a69a60389367d234455119dc395667c1530d12314eb998006d47e7f1cbfe336d1e249f04ac5e88b44c

    • SSDEEP

      393216:t0eFxWTics3YkZls45LKn/ZwtI4Np+uH5Xw7nxQPY1DrnQDtZqw2MQXgXwC:tHxWTiTYko+LIxb4v+uZjqPQDtZ3yXgR

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      192639861e3dc2dc5c08bb8f8c7260d5

    • SHA1

      58d30e460609e22fa0098bc27d928b689ef9af78

    • SHA256

      23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6

    • SHA512

      6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc

    • SSDEEP

      192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr

    Score
    3/10
    discovery
    behavioral2

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      25KB

    • MD5

      cbe40fd2b1ec96daedc65da172d90022

    • SHA1

      366c216220aa4329dff6c485fd0e9b0f4f0a7944

    • SHA256

      3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

    • SHA512

      62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

    • SSDEEP

      24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz

    Score
    3/10
    behavioral3

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      b7d61f3f56abf7b7ff0d4e7da3ad783d

    • SHA1

      15ab5219c0e77fd9652bc62ff390b8e6846c8e3e

    • SHA256

      89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912

    • SHA512

      6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8

    • SSDEEP

      96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc

    Score
    3/10
    discovery
    behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      7KB

    • MD5

      11092c1d3fbb449a60695c44f9f3d183

    • SHA1

      b89d614755f2e943df4d510d87a7fc1a3bcf5a33

    • SHA256

      2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77

    • SHA512

      c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a

    • SSDEEP

      96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA

    Score
    3/10
    discovery
    behavioral5

    • Target

      Qt6Core.dll

    • Size

      6.0MB

    • MD5

      46a0dbd38cb28d8e79c80c9a033f6ae9

    • SHA1

      1be5f3e78485f9b08e32346f13155a94001de50e

    • SHA256

      225bd38093416c825f2e3220213f64e1079e9ab20f4738decc0fc6eb992e8a9e

    • SHA512

      3fb62bce7b1d5129237914269aa3dd9a24f9e797927f2f4f937a0a291d357a40ec51b9c829094dc0bae1edcd6c580f1c9a03ca2c84d5526599c3608246f00bd0

    • SSDEEP

      49152:u2CQUPAGYdJn+5Im58kP6zNqVJLACl5D4CmV684bbTx5Hdr6Ek11RzVSGlgO2v8C:JJGA1rStYqo49KFdu9CwJsv6tjf/33VX

    Score
    1/10
    behavioral6

    • Target

      Qt6Core5Compat.dll

    • Size

      851KB

    • MD5

      e50b9b3fa16362c86a40e6255c6b45e7

    • SHA1

      fa8ce8fd6d4415abdb67597735575dc83a8fc634

    • SHA256

      c95ab3df8dc0bfd92925b7b8b51bce859ae09008691874a5c6f5630969557564

    • SHA512

      03a8ac0ae14e8420dd9fd91bc1619d072882d152127b3f2f1c6f7e670b7c54c524490e7c84a7cd0b76e2db413439a1ca55c4e03416fd6beb47b1067c3e960cba

    • SSDEEP

      12288:xbqiBp2WMX7t4i8ZOOSD5RC940wGsPGE/4717VKIyBDPzHkSDGGJf6bfOGQyMjDu:JeWe7t43veC9UG8G7VeDPTMTfnMXh4

    Score
    1/10
    behavioral7

    • Target

      Qt6Gui.dll

    • Size

      8.5MB

    • MD5

      7875aad0d0d426e9d1b132a35266de32

    • SHA1

      8b7656e3412ae546153d2d3df91a6ff506d64749

    • SHA256

      fc2464f62d7915ddeaebb5490bee6d60e7b42ad5a223d5812f0993c27c35be19

    • SHA512

      9fa16c5c628f2e9b242323aed4c1aa70f093cee9f341ac61640287ff9be8663658f502769e037a8409943d3c9ab826bb1c6f88532f0fbacdaea28b2353cdfba9

    • SSDEEP

      98304:xNydcIXNBZBRhOWJDzxMv6n/aSu0shezBE4:xRIhBRxJDzY6n/nu0WeB

    Score
    1/10
    behavioral8

    • Target

      Qt6Network.dll

    • Size

      1.4MB

    • MD5

      960f50470059381c65833145036fef29

    • SHA1

      270e230bfc9248e5ecff9ea8dfbc5f1066df02ee

    • SHA256

      1071f4f88c65317401bf93a2ffb55e661adcbb84f05911879ab21a6656521a68

    • SHA512

      cb0a0d63aaae1b9646dad722759b1c53b36ed13a4231a30b054f6124bcc69e7285c5777ab6bbbb8296756d6c31fc94e735db42c5155db35274e0ec25c1406582

    • SSDEEP

      12288:DVf2kuxdwo86ZrLlGZHLcCzIOLDjl4LgtMEmASO3xMBgt2qAa:DRDuxdwUZnlGOCzQkMp/Bgt27a

    Score
    1/10
    behavioral9

    • Target

      Qt6Svg.dll

    • Size

      377KB

    • MD5

      67a888c61e6f1dceefbde7287e80e59d

    • SHA1

      4cbd1ea71ca25a6b87c64c163d1fb3e61cdacc2f

    • SHA256

      22c48c35d9915bc89b13d2dca91c74b8531989a887faf642c795bf593e00306a

    • SHA512

      aab6f980e0b397fd7e8823370ac398d108f20a2f5c3ca052391a7c753ef77c82d94e0a37d64bc708aeb5c95d31e534faa1a6a7582d80fc285325acaec226f1e9

    • SSDEEP

      6144:NrCsrknzH2m/rXsu5ea8r/c55qah10+9F+Yw5UibIyj:Nr7r+TTD8r/oqaJoIy

    Score
    1/10
    behavioral10

    • Target

      Qt6Widgets.dll

    • Size

      6.2MB

    • MD5

      34abb42b63e71b09b72b48cf5b1dba53

    • SHA1

      9f3111aab57a5f28a4ce9bf82ea208fa3eadb9a6

    • SHA256

      c71e65b882a84f47114590784a256f14ba19202ec30b218ce4841b2c7256060b

    • SHA512

      06acab5a04a5d3e6834ddc95229758d4adc7a7f0ef003c80e8d59a8241e295b196aceacce20c88879e1676405a2538d032ec6ac543258538e686878fb29f77f1

    • SSDEEP

      98304:RCOQZE8fxqbA2SwuevAGcYYaCsGf1e5A64N9m3JL:RCOQa8fxqsKuevAGcXacIW4

    Score
    1/10
    behavioral11

    • Target

      Qt6Xml.dll

    • Size

      151KB

    • MD5

      7fcfa82dd4a01915622c14931cc585dd

    • SHA1

      079736f39ed5791df528fed5a12456285bfa1f18

    • SHA256

      8b772f5f227b266c47655d02843bf51be6c50729acc28db7dced488d62f7ed4f

    • SHA512

      caf98eecb1c57789b91dbef88c3f908f0652d29d93ae335526987a47f791d565e67e25ee4643abd006a39b2d9533449672c2c21df23cc61d77032c3cd01d6f39

    • SSDEEP

      1536:mwnpe/AQ7BlrQR2d4KQfKlxQYCfmh2DGFd7ZsSCLVFEIK0qwxDqyDzbYTOj9AIKG:xIAQ9YQ47KsYAJGFNHCTRqipzvyP7Kvt

    Score
    1/10
    behavioral12

    • Target

      iconengines/qsvgicon.dll

    • Size

      69KB

    • MD5

      b57d0218475b81560454e6c0a1a6d9c8

    • SHA1

      21206763e7121d4792bbf24075c6f6e27c2c11db

    • SHA256

      8ab3b526b35a0dec08b4042da70f942b3b5f4d413ad4035c691f972b2008778e

    • SHA512

      83464c21073edddcd77dc0978257bf13554ef01825672b60081d9d4ee5caefffe9ed6fbefda0bc7bdc413925b9265981a994195700190cd81cf6b1c93810e891

    • SSDEEP

      1536:UzibTbDQn6wcma+mHKT6IQubV5awlhBlfbnCMmbizDRT9WcwgKxngep6v:UObTzq6IQubV5awlhBlfbnCMLzDRHZKe

    Score
    1/10
    behavioral13

    • Target

      imageformats/qgif.dll

    • Size

      47KB

    • MD5

      000b3771b3dcf0d7eb72750edd80a192

    • SHA1

      35506ee878b8ad21dbd35876baaf586c30152b71

    • SHA256

      6ff0b57822dae5132e1640afe4f8fd6b75e21cf3f1eae53d70373c25a5506581

    • SHA512

      4472089f5524172fcfd8d2f8acbf67a3f22b08f788b52d8f42d2736d050cecb87215a9b8d706baca12d5916d3ff79bf57420766746c2484981d679239b3f2924

    • SSDEEP

      768:/ONXrIbWKNNy/Qq0rvEx2eVG5bvUbBy+oBS/oxgKxnVbGYJlWLNBf:WJrIb9KQOVG5eBy+oBSQxgKxngekf

    Score
    1/10
    behavioral14

    • Target

      imageformats/qicns.dll

    • Size

      55KB

    • MD5

      b8466ebadaac59acc5fffb674fcc81c0

    • SHA1

      d40349f19c85405fac6d027008a47a51de9e82f2

    • SHA256

      79b31f4de8f3d4ae02d1115e4ec384aad568b4fba8631b5a01a578c42748df19

    • SHA512

      ddecf05443bc19b95bbb654b7ea9417a26f37b9c8a293d16fcd6e817eb984baf0497e183acfe91096e3b1f6367e827fa3833b0a90fb964671af014c78e9c16d4

    • SSDEEP

      1536:YjQEXCukdHgnHhuS+JJXGAjTaO5HjzbgKxngec9r:YsEqgP+JraO5Hjz0KI1

    Score
    1/10
    behavioral15

    • Target

      imageformats/qico.dll

    • Size

      46KB

    • MD5

      c64789dba4e2aa3bddf17bfa89e7ab59

    • SHA1

      d5914f9eede38dda3e16c4299fce8016799b28d3

    • SHA256

      bceee911a3ffc1ed7b09a9d79374053fa813a04a22c40b0a4984b845582e3e8f

    • SHA512

      31e5a009284867a591ac9dbce92bddbd8b914133bb03b327984edfc4c3f4329a08238b1a239e7408d8efc715ff23acfa91723720879ab8fd4a2619e948ab5683

    • SSDEEP

      768:f0hZMxD05ahDHpeNoU3LPepnzGn+J7wnZ2gKxnVbGYJloNb:cU052peN57PeRzGn+J7wZ2gKxngey

    Score
    1/10
    behavioral16

    • Target

      imageformats/qjpeg.dll

    • Size

      552KB

    • MD5

      3aba46b716d9cb3b99efad42ed7970ee

    • SHA1

      aeabe030389dff2fec45797f3f726bc2bfbe4f8d

    • SHA256

      03ebe96116bf6e98fe967f046e62ab269ff863a3bf4dc9a817e0704b6199899a

    • SHA512

      7e750950f4d9a31f56c3a54bb363711b6326ed42ac09a21da41fef5c78c18b4ab6fc21e340f7660c8a8b8444903dc52a258207abb6b40176b5142c7091a83e7f

    • SSDEEP

      6144:BIrdnEH48pRZgGBj+3H2WR8Po8M7Kbm7/1HLh6pkUj01SwbnyEPz/cN4XA11CUBN:eRGZhkUuSeFZ6464DJvAT

    Score
    1/10
    behavioral17

    • Target

      imageformats/qsvg.dll

    • Size

      39KB

    • MD5

      21d1279f76e64e42db06c9e27776d3cf

    • SHA1

      6f24d575f44d43abf8a2ee2d9a4b7dcee1537e9b

    • SHA256

      8878473e57bdc0a754a6df4fcdc5c13ed5500adbb0a057f73b21674514adcfc6

    • SHA512

      1beb7d24375fe6bc6dfccf564836a77bb68679d6f7b81364476ac346e6a0fa48d1b6782f101823c51550c600940c78fee79567eca248fb3b782d7bfead7d7141

    • SSDEEP

      768:WjnLIUmgd9o0+iWCKmrDqVZKgKxnVbGYJllsDNMb8:7Umgd9FLWCKmrDqVZKgKxngerb8

    Score
    1/10
    behavioral18

    • Target

      imageformats/qwbmp.dll

    • Size

      37KB

    • MD5

      50854ae793a75bdbe0fcab1867b6f932

    • SHA1

      91f15c56945d08d7ad54339c68e7318a7fa653b4

    • SHA256

      92283f9f9588a12c630848c0949421dcb9aa33cd6545ff1e3e480ce3d7e7e617

    • SHA512

      437a7626dfa90038800068e385c5bd8515f7394366532769defd7a7992593f5051314a1c77ccb9b87d47c304dfc9be62e39444250651f4c8cab9052c65ded14f

    • SSDEEP

      768:DptuZOmR3P+NX2JE7lTuWOrHDygKxnVbGYJlTPNAt:8OGP6X2JE7lTuWOrHDygKxnge2t

    Score
    1/10
    behavioral19

    • Target

      imageformats/qwebp.dll

    • Size

      527KB

    • MD5

      cee0dddffeb26ea50268414c28e656c3

    • SHA1

      67f5c820e62c4e8bd8596f70fbf316496477df2e

    • SHA256

      d3a1cdcb53b229040a065534465e1db27c3347b29d80417c22ccf8b7fd65a4e0

    • SHA512

      9847e491527a81f67e6e32bb0cb27fea1785e227bd8fca3b35b1dc451cce647d9e9df23abdfeefba064f98134c3a2e3a584481625d584576aeba6ce293037847

    • SSDEEP

      12288:9zaweeWDsi1cALrLrLrLwc/EMOTmUZxx2E9QxDRTr3:5aZpqALrLrLrLwc/EMOTmex2EWr3

    Score
    1/10
    behavioral20

    • Target

      jars/JavaCheck.jar

    • Size

      1KB

    • MD5

      46dead10b38ebcd54cb44e04d015eb8a

    • SHA1

      890a4316e2bc3937acb65eafcc7511f6022b48db

    • SHA256

      c7e230469627a3c154bd5e35ab3ce0449f92296c357bcd001dae455ddba4add5

    • SHA512

      f9b758c0d52a99f2f689bcbadd1646cc99c57284a895c55d3800227b155b037d11902c0d21c12ee3e0acc87fb34282aaf641af54c9f7d6bcc574d52eac72471c

    Score
    1/10
    behavioral21

    • Target

      jars/NewLaunch.jar

    • Size

      13KB

    • MD5

      5b6414f9f23c30a7cc5f56484a49f68c

    • SHA1

      4936659c2817b2ee7df01f20be6fefa8a9b4dfd8

    • SHA256

      c88b3e95fa23c5d0011868380475ff5509fd7eceac49fa5730d473db1d85d7c2

    • SHA512

      4f5fd57d31fab7c54b7233c7a77b2f8e6c0f129ad187c8dfe9ef00d3644f4dab02322ef255753c9a497e7d3d0b1588a002f4f6b9d13208afc6eac75b8d0e3ed7

    • SSDEEP

      192:Vttd8foDNpA9Tr+/KqlKlnlTQbcjXzXRsXyajjWuiBeGnh4tWIsE:Dtd8AJpAVrDFNbBeGrE

    Score
    1/10
    behavioral22

    • Target

      jars/NewLaunchLegacy.jar

    • Size

      23KB

    • MD5

      0751f8826e8c51239fb85b45b5e0727e

    • SHA1

      a392df2adf218176b403e672124bc0bb6d5596fb

    • SHA256

      6525176aa9fc2fa39907886b9598d19e0817e1712ae79f3fca90681227e4ad62

    • SHA512

      26fbead248b1bd9e33d7d7712f46350b15b593485bd29bc6b719df73ad667222368ab8b37312b3531f23782692d65062cd801d23bf3931729c87d45366759720

    • SSDEEP

      384:p4VLoWD0UfY+ONvlSEaNx1jA8Buc6gd9rMkTbqD/8SmWlnLZ:p4VqdlCx1jvGy9QkTuD/8Sm2nLZ

    Score
    1/10
    behavioral23

    • Target

      platforms/qdirect2d.dll

    • Size

      939KB

    • MD5

      a883645fd99ed6b7d6398e1bbc5028d0

    • SHA1

      ab0afcb2d58df52f402c0a2a81bf3f769fea15fa

    • SHA256

      9386b1af2adbf8972801723f7d13f394d96001e979f06dd0695622a6a3ad63a8

    • SHA512

      d70aafb4cbc0c2f2a8fc16e3560248f867908548c7b970d827ee9ad8c7342502dcf77a7b442a06a547dda6bdc6f3673dde5f909242327161fe1fdb272575ee3e

    • SSDEEP

      24576:QxUvGQVkx2CU1pZIEssh6meUMW90X7hNo8FEJxGH:QxUdVkx2CU1TI5shKW90X7ro8sx8

    Score
    1/10
    behavioral24

    • Target

      platforms/qwindows.dll

    • Size

      869KB

    • MD5

      6031ccd3785bafba8556008cbc058dfd

    • SHA1

      885147d02060dab7b0a124865c8116a478297ce0

    • SHA256

      2bdc29b85bd94170f97aadb1cd447eefe7a3ddf7950c535c81a9ef63e17d1ddc

    • SHA512

      b35c58cddc461c0160ee223fddcc181d8e6c21b5713fd8d216334b69f6ab1e4c12f4da1d377fd5b718db2c723ab20b673ab89190a3acc88d3cab03ff23bfd23d

    • SSDEEP

      12288:a43KXCSGnR4CZN6RMCojCXX/4wVlfc6TjxWFsiHxmZ:a43KDGnR4CZN6RMCojCBXk6TjxoRmZ

    Score
    1/10
    behavioral25

    • Target

      prismlauncher.exe

    • Size

      9.8MB

    • MD5

      f870a1b89e9bb05023eff04fd1ff4053

    • SHA1

      0140d7feeab5ce8833b9bb55a224d041be3b2be7

    • SHA256

      e2871c9c570bf8e8f2ea10a7b91f08ff3833136e861c5fd9679f7ad3d5433442

    • SHA512

      766008210a531061b6b0af3fe2668f6d973b008dbe325f58b571927d8cf48c76a03f26135ce1c6fe573fe61ac6274a31fc9e7a760aa0eef93b6ad78147ba418a

    • SSDEEP

      49152:xGAw/M+v4j6VhJBxfQSKGzn79A26OwYbFxl25l8u/iuUVF5tG/k4GyLqvIzetEb5:WouBRw3kzhIze8pIHDno6TRAUNxOKRi

    Score
    1/10
    behavioral26

    • Target

      prismlauncher_filelink.exe

    • Size

      101KB

    • MD5

      09c3ed2dd3dcd058fa4a35bc8b9bbe9b

    • SHA1

      aa1c9bb4cfc819f745770e4b0c77d3312dfee6a1

    • SHA256

      ed5396c4679c762334b03a7673d215b7186230d85939bbcdbfdffae8d444b2b9

    • SHA512

      531160b779b0804d504b8fdaaf64e3fc5f8860d2566c886abf5d653ffe334304e9f4bb95c9c87b82c328dc343c98d57c0e92140b408a51433a2d6de21ea813ea

    • SSDEEP

      1536:f2BIGfDjFLtTUpkDRQSAR4UyfPz8aIhLcNiIGUds4h9ZMIdBEuEuL:HGfDjF2+iTRXyf7bkSihW3LieRv

    Score
    1/10
    behavioral27

    • Target

      prismlauncher_updater.exe

    • Size

      722KB

    • MD5

      ebc4b6b2ea55a2ea12c404fa3e4a4ca1

    • SHA1

      f46a624d9f362439b3df0bf745d2c90b2540fdf8

    • SHA256

      f1cf90ac55273faf99201788af67ff86bfac5939a9bc8c5f23bfa841c521e980

    • SHA512

      f634faf77efbb372ad759b9c92281a140b0fc2ea323402beaa43c6d062421885eb3f5919e580c089f44d8304bc1b3e286178e0bc0dfbb9ec2677265f8e828a54

    • SSDEEP

      12288:mYSODGjhy1PvlmQMeW14Wt8ULNBNtphSUQ1fB0Ukp:P3DGjh2PtmxeG4WCULjZdgg

    Score
    1/10
    behavioral28

    • Target

      qt.conf

    • Size

      1B

    • MD5

      7215ee9c7d9dc229d2921a40e899ec5f

    • SHA1

      b858cb282617fb0956d960215c8e84d1ccf909c6

    • SHA256

      36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

    • SHA512

      f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

    Score
    3/10
    behavioral29

    • Target

      qtlogging.ini

    • Size

      534B

    • MD5

      4995c4ae4070a861669fd6e997d815be

    • SHA1

      aa42f6bbab438d303e6e74172eca6a0673239e2d

    • SHA256

      fa8b3d64121cc915337b69756bd87597f4f557a802a95e953e2dfe33e40a52ff

    • SHA512

      96a0cee7c45fb86deb02286f6994a7aa1979e69e6e0bd3014a9ed897e6695d2fa586434fc3ea9c083118f1440bfcbacb9d4bba55cbe6ab14fdb92424b31a315e

    Score
    3/10
    behavioral30

    • Target

      styles/qwindowsvistastyle.dll

    • Size

      140KB

    • MD5

      cc096aea386047b0131eea248122c0d2

    • SHA1

      6251253bbc6e4460884bfc22c1dd30cec32dbac4

    • SHA256

      47a22e7958279e7668ace09849a669f7410bf8c7aed752bd6e60f23c9581cd50

    • SHA512

      4b097b86a21ac26e8849bf3908de97479b3484f28a68060c06f75515b07b8878466bce4241aae6b0c06a1b671b59b5dd115c760f08dc6d3287f1b875963d1cb1

    • SSDEEP

      3072:8zlYfzLG/ztKAYBxDwZ89kL7Cl4CpHl1uhfJWu5lzg0CJUXZmjOtkRKM:0lYf30gfDDsYUJWubzgfJUXZmjqM

    Score
    1/10
    behavioral31

    • Target

      tls/qschannelbackend.dll

    • Size

      229KB

    • MD5

      8eca729b0b937a63aaa105c98c2647f1

    • SHA1

      9a047c46345d6f0d48ed9901bf8fbbc20d902714

    • SHA256

      f0dba9588db6f1599b0668b8b41d054e549e2b7bcdea6e5a1f36f49925d50efc

    • SHA512

      74347a89a14c8e884fd20c860940b54e32b172edeec5639ed3c4ff9db9eea2ec2281d54facdb64d71fb1e63ec462063ad844277522c0a3162a4f8b72d18a0c92

    • SSDEEP

      6144:yfGf+SYQavOpvLW9AmYaq3voiMWUcNHl+FuJrywmvVoabwaMjcSeRmWvBfp:MhqLW9AmYaq3voiMWUcNHl+FuJrywyV3

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

4
T1082

System Location Discovery

4
T1614

System Language Discovery

4
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
3/10

behavioral3

Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
1/10

behavioral32

Score
1/10