2cd0a8c43688fe1e06b125d2d5ced2dbff2d21ab4566d3d221c7a858f5b23aba

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MSVC-Setup-11.0.2-1.exe
Size 22.7MB
Sample260516-qdsh2ahs2l
SHA256 2cd0a8c43688fe1e06b125d2d5ced2dbff2d21ab4566d3d221c7a858f5b23aba
MD5 d7ae7e9caaed05080553abf2ba89f5e9
SHA1 ca2ba2b37036c2e412a5bd53d1594eb21e534968
SHA512 b6538c0ae53ccead38764c2840fb4da404143ea4e80826fa13828f7665b62a3137de1745e43753f582c7a73157682ea0f8bcf43fe580c4e040a9a0e218bafdf1
SSDEEP 393216:tJeHR3eb8AWesgBCBglg21N3RYJzk8D2RAIACcspokbGH0uEvfSkxsGd0GoPOtOQ:twxU8tesgB9dhizk8D9CcsaH0TvfFxdb
TLSH
T1CD3733159AB09280E40C5A7C09E3F7B93657AD942D61315FF5F33C3BB37154282AAFA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  PrismLauncher-Windows-MSVC-Setup-11.0.2-1.exe
- Size 22.7MB
- SHA256 2cd0a8c43688fe1e06b125d2d5ced2dbff2d21ab4566d3d221c7a858f5b23aba
- MD5 d7ae7e9caaed05080553abf2ba89f5e9
- SHA1 ca2ba2b37036c2e412a5bd53d1594eb21e534968
- SHA512 b6538c0ae53ccead38764c2840fb4da404143ea4e80826fa13828f7665b62a3137de1745e43753f582c7a73157682ea0f8bcf43fe580c4e040a9a0e218bafdf1
- SSDEEP 393216:tJeHR3eb8AWesgBCBglg21N3RYJzk8D2RAIACcspokbGH0uEvfSkxsGd0GoPOtOQ:twxU8tesgB9dhizk8D9CcsaH0TvfFxdb
- TLSH
  T1CD3733159AB09280E40C5A7C09E3F7B93657AD942D61315FF5F33C3BB37154282AAFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  archive.dll
- Size 716KB
- SHA256 dae15e297e4be332c38f257c4a21f337a6f9b20a1fd6fdce609c0c45b010c551
- MD5 d6e97f5c6fe1e0ce9fbedd1e12cc0503
- SHA1 b60373132c77316edb0a5450cbf566041805ffc5
- SHA512 469dcf0ea85663296ffd45bcdd19192f1c9f831aef9794d6199bf79bbfaf8b1c71655378ccd69fa66d8df29bf928f1a5bcb3c09960b5e08be578b08c97c85705
- SSDEEP 12288:qMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCcmzics:/SFVwT75qEtXm8KgQNjVTNjzxwjnwr
- TLSH
  T125F48D82BBF40668E977C1348546AA27F3F1F0551760DBDF06A487653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bz2.dll
- Size 75KB
- SHA256 f843505d235aa7cb3ba48a0f159db5db4387cf02221eb2c1449d5fc0f943431f
- MD5 03324f7e57d24d37942c2952935a6381
- SHA1 2acd551a70710c7733117bdd3a2dbe5a8a4f1637
- SHA512 32ab97897711bbaaff8403a35d830de6e05530fd76475d3999936ed935881ba3e60896538a953800b2a26e511e3913996c1d40dca51abfb5dff1ced4d95e5f96
- SSDEEP 1536:RBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLq+ti8y:TuxAUhbrYVLqGVy
- TLSH
  T16D734B40B6A3FBBDDAABC0385623074BFF35BD680B1117BF3560967A2B22A910D74516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  cmark.dll
- Size 140KB
- SHA256 6e04aa82627e6626491e3f13f65f14e8f4523cc8ace04fb1868266750d2019d5
- MD5 bb69690ad6e26abaa1eab2e27b4d67a7
- SHA1 2c009606abbb331d94a8080f9630934194863dc0
- SHA512 84188f3279d970a4a61a57523ba4685b0f17e13ef49d298f9a94273b7fade921e4b0dbbf8b41dc9944a63b536e79dca704c0aa7c9c838e8c31f60dde78b40eaf
- SSDEEP 3072:w5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIiQ+:sWcBSGsvVlFVtaOmROEiQ+
- TLSH
  T140E34A96F5BC0066CC1BE07D4D2EE596E3BAB2173310C2E716400E65B9E7BE27636352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  iconengines/qsvgicon.dll
- Size 69KB
- SHA256 6221fed44f0f560a864312553c6918a536b8e2f04c7cb4e8ee5ba9445338aa96
- MD5 977a909b6d3ea33173e67f363ab63f16
- SHA1 ed82a046b6a1f7154400efad44e99e06a434f657
- SHA512 de30d97acdd124a512f0db3331d5352fed13be2cb0d7ced89cba703e016754bc703b2185e6af06c54b385cff989bafd53dc7f39e7a567b2e0ebfe8532a06a080
- SSDEEP 1536:KAaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbg7u0O:Va6jmZh9poUhDu2o5bB+imfbgfO
- TLSH
  T125637C1367A81449DC2BC63DC367861BEE72B4146761EBDF13A1C8362F67BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  icuuc.dll
- Size 36KB
- SHA256 6febd789ff616dd6398ae2453adc1e7ccd7bbb6aee8c623a2638c1c00d51e003
- MD5 e9f9397709df3528c75c1d19fd64767e
- SHA1 2d392c946c58203679cd33aa463041639e9fcf91
- SHA512 304a41711e6247f6dedf50697c8429a92732bd8104f94dbc5589eb60700d50a835643f16d391d11850d48bf3309ec8f4e170e2ddefe776b5459b2ba3682f8bd3
- SSDEEP 768:/CFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mr:K/prGPh7tm8T9Z
- TLSH
  T1D3F2D60DC8084F61D3A7DB3F697D392F1922099ABF69FBB8EEB4C99441D520D20B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  imageformats/qgif.dll
- Size 46KB
- SHA256 4fe24916a961587173c846055a34735b904900fb75716de4fa458c203da3e7ef
- MD5 c933629492717032aff2bc52c2829edf
- SHA1 3df3ba7f3bef412caf9dc309ab1634443922fc90
- SHA512 d763864e416bc5db12412b67534d07fb597145a5b479b3be527a17079fc1fd82acb4ca6eb77e8d0e764d17140581604076f9aa050b678d72cc4a8b3eb1ccf423
- SSDEEP 768:nGXTVMV6wdBj3lpVt/MSsk2OIEUcsohX7cocVW/5YiuiI5ALkZZ:QTVMkw3j3fDpP2pcsEX7cnWx7ulZ
- TLSH
  T157238C83ABA044D4D4638234D9964E2BEBB6B6244B92C7DF4221862D1F337C13E7D769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  imageformats/qicns.dll
- Size 54KB
- SHA256 fcf2c00c959cdc7af7f7ac51e2f1158f37a76c166367bf30c4edc4e0657a835c
- MD5 d3c5d0ef185418015689d97a2c888797
- SHA1 b5aee11416ba575427ecc61ce39b408c26217f1a
- SHA512 a825c7ba279bb390a3f055cb786d544993eb1e795cc084c58c1321cf6f3063b6b2a600bd3fc9db49aa20c5206ce63a0475ed1cdc4caf6c19c6c2ca289fcf27db
- SSDEEP 1536:EOy2+up1dsYzCqj7JkO4eX6sOSVBpTJt7uia:zN+uGYzn7JosOSVBLtpa
- TLSH
  T190437C07D3918285D417CAB8D54A8A3BD772B4011B928BDF0265C92D2F733E27EBE794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  imageformats/qico.dll
- Size 44KB
- SHA256 0d79934047e06591b74201d826af72f6ab595f5df4705ad7f0c234c0e2cf3a32
- MD5 7ad9178bbe3dc7276dc37682e012436f
- SHA1 db52b71eea1a577719e10365ad96b51fa6229010
- SHA512 e1fd52179926d7228fa465be42ec863cb026dbfac72a3341a1f026f178c70f2fcb04f8537231d88435becf29b83514d6cee35d0954d1180f21e2eea3f14e633e
- SSDEEP 768:LrYUBUjz9OXYC2x5XtuPvHeTLXwWs5Yiui7H5ALtl:JBUjz9OIP5duPvHeTLXwWW7u/l
- TLSH
  T101237B9396780489E927C678D8834E32EAB6F1605B92C7CF1265861E1F337C23E7C794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  imageformats/qjpeg.dll
- Size 564KB
- SHA256 004f456d513a6bfc58320652c326a023fa8fea905d26b642a561f7081442aff0
- MD5 20152eb4b41cf308240b1768bc49f337
- SHA1 c93e5807adc9c70b9604ae679547bf84874fb2cb
- SHA512 4956448be2b65c6d633403315559d9fd5f7a67090f36187c7b76957574d3c0c15ae26e941a9891e0762c81e7b28ba6079d9362a59232ff8ad7353a25658c2ffb
- SSDEEP 6144:Gg2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbb:HfrS9ECMre3
- TLSH
  T1EAC42942F6B51841C7A68878DE1AC966DB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  imageformats/qsvg.dll
- Size 38KB
- SHA256 b34f721be6e1a451a2eea3c146b0808091577143587d9e6bc689fe8214ff47d7
- MD5 7ee3b5552503b27a6ad2776a8fca2fcb
- SHA1 546a8bd11cd2f7aeaf37e3f971056247bfcbcc94
- SHA512 44e4b59ecb02a15e818fdc4fe2bfab26a7b70d88a724882bdba40d99ce41cf8352f93455432ede60142d57d1f5dcdcfed21beddccf5b02e51177b7677f8b2b24
- SSDEEP 768:8Si7nr/w0rAkuV2O4L5blG7uK5gSK5YiuiVi5AL9:8rr/w2AkuV2O4L5blG7uK5nI7uor
- TLSH
  T157036A47DB681846E427C2B4E84A4E2AE973F5514B62D7CF6262822D1F733C13D7C39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  imageformats/qtga.dll
- Size 37KB
- SHA256 c11ac719c2d7c50a4c2924ef4d439772176e00723e96f04d50d4a70163a9abda
- MD5 95291482f2dd14c88fa989dda454a90e
- SHA1 049589088f2194553e14ffd26b2f6546a5d4ba36
- SHA512 ff433baadda95c72dc1b8bf8575aa28e8a4a309195ccfe709b74cdc23d65140959c6718e982df674bcaf90acd970b246010ce93a6d8591debd4cb1054959b958
- SSDEEP 768:pkK60f5ksBejVX47kqfNZF5YiuiFPi5ALEA:C+usB8VX47kqfNZL7uIPiA
- TLSH
  T1D3038D53DE541C45D427C678A5829E1AEA72F1208B62D3CF6298835E0F773C13DBD3A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  imageformats/qtiff.dll
- Size 431KB
- SHA256 498e9259b9ec69a7f9a77e4ff796b9d2afcaa2e4c7c0a382b401f0b1c07718de
- MD5 217ec1613178742e4b8c285fd12617a1
- SHA1 224d488963d0c1686e1b2087327118b45a3ad2ca
- SHA512 f1c8673f8554cb4798c26136799af4d09a7455aa52716af28adbe66d0ebc87bf05d61a5142dc45aefe4b25a31729d550b74c184c58cb203df585e65df11c19d4
- SSDEEP 6144:q7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhV:069ZYmmGq/Q3DbnzGo
- TLSH
  T107949405DED049ABD872813955E7C612F2B3F4453B12CB8B9698B1353F127D029AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  imageformats/qwbmp.dll
- Size 35KB
- SHA256 e3a1be02183ebd3c136a4554b34689cbb9ee6699278efda6944e9faf9c02f4e3
- MD5 365b862dffd1449269ab11704c8e5206
- SHA1 d8c88f6d5071fdb142e9b23138e8ab968433ab33
- SHA512 c688d6f1d7b972b1eade0303e529aa6a94998b24e02ab01af80d392b372acd2de366d24fd230e2931594a1005fa1762a3a8b82ce12882ff864936ccb12954044
- SSDEEP 768:NaVooyFmtxWX2xyjnl2OYomf5YiuiM5ALn:MLyExWX2xyjnl2OYomR7uQ
- TLSH
  T1BAF26B63DBA44881E527CAB9E4868E27DA72F5610B42D3CF2266825E1F333C13D7C795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  imageformats/qwebp.dll
- Size 549KB
- SHA256 3fb2f8be5b82dada607ac9133a5139c770bd210145ea2ded90e69953b21a8d4d
- MD5 fbf2647d8dc1db68857d24d8924d8dab
- SHA1 8f7ac7d002113417eacb044d5de64b574dfeff8a
- SHA512 c289a111542d1313980f514bcf2f75af554a5cfc7d7d005227199eb3c96941bd34bab28651669454c83237e33c2079730b7ee5e0f32167dac2328b40cd3bcf39
- SSDEEP 12288:LWhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518sU:LWhBPLrLrLrLWCYNVhA6Z9mun518sU
- TLSH
  T1F9C46C8ED99623D8D49BC4B89AFD961BF6A53C1C434095EB17D0B9293B33BC05637B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  jars/JavaCheck.jar
- Size 1KB
- SHA256 19a803401a128dd4983d30eb5eb804a13c129c980a28afdfe68428059f0f5076
- MD5 858b74093413c1a27c6b58b7255f7c34
- SHA1 9f079f34db8e2adc197628bc7ceceefd27950b7f
- SHA512 1e154337833b52cff0d5311faac08155d72ef2c1985ea59befc2b3b279930de467060284efb556c01e1496ad78b51f7e7afd27d9e485c0826009d2d50fd72e37
- TLSH
  T18F21F0657FE4C066F71F54BBDB00B253852B0124955D910303946A949D64BC55A338CA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  jars/NewLaunch.jar
- Size 13KB
- SHA256 40bcfd2cbdc0cc38457590d9fbb1875dad0705f23204d52feb8d114099446afd
- MD5 4eeb7d10c040b252920eb4f24923220d
- SHA1 57d619c1ffb84bedf1e3dc193cafc7ab1f24fb80
- SHA512 832cd1c66311a651f3571af1849a621fc4fb543711f2ebb7e7c697093d048c1267bd42e2a9d9fb1ebc9906d27b0fe8321e241b3788224bbe6a79e8d7f0ee7365
- SSDEEP 384:qUuAof8bfWI0LUaqeiW1w5Eq4kBMRYCmFbg:XuZfcWdbR2ENSO7Qg
- TLSH
  T1DF527C25EA93C8A5F55F83784AC587AF7C116680E0F171331FB29696582CEDC5E23F88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  jars/NewLaunchLegacy.jar
- Size 23KB
- SHA256 6736b3faf7a0bc9262cbab22cdab9e5030e9e262daed25aba6e4eb01ff203639
- MD5 d1b708c4e43c7fe8c1534d6c956c3f18
- SHA1 74e67f241a79b7366cd56f260d390d6388b299e6
- SHA512 d1cdbf571c25e931522520ed16773df57665456e12c15a360b65cc4b8e38726b63b5e7d033fe1fde06b217ca3877b804a4f5f2eb41233cf8365954effda2d291
- SSDEEP 384:awIJiDumLAkH6wnFdSoKsAa3081Yp0GSUNCmMM+KOy/flxuDKA:3IJQumLAkawFdSAAyKp0GQmMFKOy/flO
- TLSH
  T103B29E37B795C891E51F463ACE4F871B5D811008C17C74A6AD760BF52C9CDEE2B03AAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  liblzma.dll
- Size 184KB
- SHA256 906eb150a9c4197ba0fcf8c5719cd1ed7d60d921b60d97014d01174b468787c3
- MD5 c4d5ec888f664529f6a7a737aae9b650
- SHA1 8da94d551d97d7e89c79cc291ce52a01e6d6e9d6
- SHA512 8b3ab2c3e82c16290c46b69006f6e94146672461ad954c61b9f91794fde4bda200bcf396dc4f29b9b230a50c15a4588a4679193ea2d611034a5e104526090d4c
- SSDEEP 3072:K9w3e7cqOlgA0xUaotDWg+/rXaHaA1HRg7GWUs9mNoLsowfXi:K9wuf45dsgka1HudYOL3wf
- TLSH
  T1A90418A572A5F0D5E2678C38C6678B27D3F678040310A6EB06DC937D262FBE4563A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  lz4.dll
- Size 123KB
- SHA256 ec0365916b106e18db1ce9553e25f4c7063fbc056cb286dd491022b4bdca5de3
- MD5 0120f8395b070c0ab9c1afa0123f7e12
- SHA1 223ec27f37f6d367c137a5760ac252754059536c
- SHA512 1d6fe38afa0dff59e0d50fa748020052d2a8cdb3f949af2e2b55c980e467ef4c22b23a0bc0fb4738174481a42d54604e2aecf7eee68e10e374946b07a5e3fcff
- SSDEEP 3072:Fs8r+jQPM8eFnR6bWuzTy0A58BY1glRr:Fr+j78eFnUbnTy78Z/
- TLSH
  T116C36B46F7A114ACE163D0BA9ADB564BE274B8552305AFE743A8CE713E13D908E33352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  lzo2.dll
- Size 112KB
- SHA256 9fff2efe005961b05f902d619975614fb6ed22687e175aa75a4d42aff42580a1
- MD5 1ac087ad47ed6186092337368b33b3f0
- SHA1 60e3c21a81bb2c87ac1a71b6f8e9fb6d694a17f0
- SHA512 5f36b04c4d3ec839fa40dc55167009d60aa2d6feee87cca875451f417905eb5b7de2141e07cc78ba098cf01adf3501000339d3a363c28cb60de114681d4e93d1
- SSDEEP 3072:psSxM+h7JWygE0lE6OEb/Ex0JgxiLxKkv8wCG:Z7MdEiE/ELES2xiLxKkvEG
- TLSH
  T187B35D19F1C650A8D9EBC2388A5FD2C9E676B4480310ABEF16D1ED7A2F47ED58D35320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  platforms/qwindows.dll
- Size 974KB
- SHA256 540211565db496024246cb8a44437212e6b967f3ee7b899e888f41cc556bf041
- MD5 8a905bb23580027f31681253da1af590
- SHA1 25557385212adb726fff539b165aa54eb3875163
- SHA512 ebe78f485a73fe4b57c466fa58153903f261da315d470b50ae233543acd671dd0269ddca355e1a25928259e26301ea6d08fd1f132f595ba5b9985b7170dd5677
- SSDEEP 12288:3EhqYCXtrx8ASfukqEZ8l4382P3Q464RSQivRYtG:3Eh5aOXfukqNl43Nh64z8l
- TLSH
  T139256C1B63A80255E83AC17ECE5B8713D6B3746903A186DB0161CE197F337E32A3DB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  prismlauncher.exe
- Size 9.2MB
- SHA256 3f785a1e1ed485ff63a48f36f59a6012ecdd82e761568c49474c7afe0f4f6ee2
- MD5 5517c3e62c4f8fcc1c517ebfb56937f2
- SHA1 d61fd423745e51d1203bedc63e40852adf24e259
- SHA512 f1ffda8c0c399cb951917af0c926b52ccd09037e6a14236e51d3ceced80e8a5a1ce14cd5994021ab6bfa5be39e82d815954b14467e47a5fca11a78dc8e4dcec5
- SSDEEP 49152:N8fDuK5spyzj2oQiFC8Dqs+S0dVrpOy+sKr87Mquq/gfdLjxAODA++HGtdhmbn4j:6fKSaefLI6cn+HPipklssMx
- TLSH
  T180A67B5BA3A502E0D139C179DA4AD976E2727C23432046DB71DDBE677F335E22E38A04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  prismlauncher_filelink.exe
- Size 92KB
- SHA256 3f4939b850fc01eb3cb2b234b7c62d7d992a82dcb0bfc507ff81d7d9f9ea24c6
- MD5 a8d528aafb15e202883c2ae8d0516bce
- SHA1 5e663ef5b7950650908f65c99dd98107d29906ce
- SHA512 f997c2c882755425097951735af41e71d9637a062c0f054181b6cfd9efd7859e021c1f1569835d7f6eb957d832f885234aeaff8de7fcd7ec4402207af789c7e3
- SSDEEP 1536:RHpyeQEjQFRulIDds+c8dyZt0xrpYDMGDrwaV:R/QbVDq+c80ZWR6wGDJV
- TLSH
  T144935ABF766901E8F175D2BDCB9B4656E337705C07209BEF03504A6A0F266E89E3CA05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  prismlauncher_updater.exe
- Size 398KB
- SHA256 8009ccd1802f19e50e60542fd76f835c62ec95dcd708162afb06aa1fb0ee8288
- MD5 968e8ac19f57d0d561f262d82bd72ade
- SHA1 1acf24c886fafcad7474fd8b10fa7f3fd02e3664
- SHA512 899ecc9d9296318bf62549850aafd0c7834f0a9d2bcd8dcfe3e2776d02e76c665c34a553e075f0458004011c619c28a6b35c650c63da6223f60b175aa6272e70
- SSDEEP 6144:nIac3vALFn/0RNKMT35ngBcoXBj8HIw5D40ZvJEdDiAROSKu6XaBVipo+b8HkEGC:nI9ALF/09DydOXkx
- TLSH
  T18E94292EEE5902E5F465D17CCB6FC612D1B370DE47A186FB022D89261E272E57D3CA08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  qrencode.dll
- Size 47KB
- SHA256 dd2842cdf48542e64e0d1a0f070aa5c4d9a81b8fe8fc4585bb6e26d724c01487
- MD5 93116e36a71fd4d32a88f587dbfabcbe
- SHA1 9a05c4f92ca6e8b1612447060121eb8fe7d66b2e
- SHA512 acd133bec0796b9868b42f13cbab4818e31965e16c5c90d4494421f437d18f093b9e10b23fedb0498c44f33ae2c6cceb9cc8aa0598dd30bb5ee2288662e51714
- SSDEEP 768:/yXjbYUZqkAvg5Lv/xiHrWlvKUYX5VgdPTLSriqWsmeS:/WnJZv7gLP3mPTLSvnS
- TLSH
  T18D236ECA7F6C01DDE1274138C197564BD2B174521B42ABCF0B90ABAA1B33FD2697B348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  styles/qmodernwindowsstyle.dll
- Size 215KB
- SHA256 f9ddcd6f6319be76ec8ea1b95e6829cdc0f9600242b6bdd07babb0185e9762ab
- MD5 e0298bcdb3d9c8df69fccf3772c568c7
- SHA1 c92fce591be5d1b3c86065b433bfe31d00a3fd23
- SHA512 d06d42d770f9470ec05f41f12c3af4292df5ec335da10c7d36defa7da1c5b791c49d644c49ca21e1ce09197d1a451aca215c11cf4c7fc4bd8b957257190a0f9e
- SSDEEP 6144:a4vKeYVVMifp1yq9uT/ocMIhw5oL5bQ/Z/P9tlJaH9TpII:a4vSVOih8
- TLSH
  T195243913729612C6C967C2B8C90B5627F6733068032696FF4167DEB42F633E2BD39661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  tls/qcertonlybackend.dll
- Size 100KB
- SHA256 584392e25d46b6edc255e4c5849920da3e52c01172199def876284525587bb05
- MD5 9a342822421c994f822e1fc1eb0bb89f
- SHA1 2a4a80606b64d038db3193dcfc4af5780c754c20
- SHA512 f65c51bbc95a6e466d6cd73a6da996231ef02da1de2c895d4e33b7ca7f447a7ef576e40cb92ce6309a025a7cf890ab60250c16c35a2df2e47328599b40fdbeaf
- SSDEEP 1536:S7V2ODzyJnNUC8Qh3ye7zjmydnrWK9uyR47sPZ3ZfAWt1cBF8j1J7uJ:S70q8V8Qh3y4zjbnrwsvSBg1JG
- TLSH
  T134A39D07629001D6ED2AD27DCB138C07D3B9B04947629BFF42A1DA661F67BF26E3C254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  tls/qschannelbackend.dll
- Size 256KB
- SHA256 4632404cb87f860e7bb811f525685509127da8d05f398aada5b2b88318e4a621
- MD5 57c91f12230e6d29a178a580584e5b75
- SHA1 cc535fee67b288cf40a5158c03036ac8ce8d27eb
- SHA512 b47ba666669f92b3223449511597049f26b56607ec435d791776d80b23578cae72d2c02e4689dcc86802b70f7bb4de4456ef1e475deaf7a7c9f9a4a96c194f11
- SSDEEP 6144:V+VXglMW11bIQIT1eov0AkuVeT9cF07Qnc74CpNZF:8VXCX19ov0GVVFcUun
- TLSH
  T1E744376722900E95FC6BC078CA4BC807E6B370955762DBEF5221C85A1F63BF2B97D250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  tomlplusplus-3.dll
- Size 376KB
- SHA256 bd9877a62d29df6e0ca46d63adbc248abcc9236df6b151fbf13c21adff7452c4
- MD5 73077fa300989fb9161e439c4de0cd66
- SHA1 ba5bb96402d99ec8d67063bf67893b105ebedcf9
- SHA512 542b4424deb0a2ea90e3f1fbd0298721eaf8b0d56b0d7d69de251719102bfd3fa6dd10f9446b0ebe6bd9dc2e5677ad578acd8b1e0811a7205021c9067df67be7
- SSDEEP 6144:b880P99pO6Zds36KshHf2rHDf0oTph0lhSMXlBXBWfrrjdMJ8:cPHdVQ9Tph0lhSMXl+rk
- TLSH
  T10F849E17FB152075C1AAC2BCEAEE4601D7B2BC89834167CF17D999A25F53BC06D3BA04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  zlib1.dll
- Size 88KB
- SHA256 38f63a6289a47450ca89dddefae29938235dab1ce361233ff4748d8df1d28ae4
- MD5 41b971d616569ffd85a0ec32c9c8c749
- SHA1 a84ecb4feca13b7c6d96863efc01ee4504cd671f
- SHA512 2096142f6d0811a0fabf9458959a523e09606fa3a68f2c2fab5cdd50f423545c892d67a9536c097ae63b6ac8b88ff2b129d27fe839c984e8fab9eaadbde049f6
- SSDEEP 1536:XvEyaXGzTqbvqRfSOzhppf/ISUaYuOlqjebaIOcIOZMdGUL:sdXozVhppnURkeboSZMdGUL
- TLSH
  T134936B4AAAB412A5D6F78174D8D3079DC335701407A44BDF5248A76A1F23AE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  zstd.dll
- Size 642KB
- SHA256 50ad826104441ae2309460308222c70f71b62269f3d47681414d462be1751788
- MD5 4e69042a0fab6c2a3d442917a639702e
- SHA1 20d8c3cec83b0a9d9a5151b31c6ba7cd9330149c
- SHA512 5769d1b270afc4de9f00359d69cfaba03ad2a59a2d7e5e72e4f495e2af87caee435f5dfabf778537ad6910ad089cba472625214a08a384f9a6f678024fc7099a
- SSDEEP 12288:rkY/0hUaFMJEOQzB8JGKnBxc1+yOdu5Io6H0Lo4b:rb/0hlKnBxc1+yOdO7Lo4
- TLSH
  T173E48D83F29992EDC13FD179C5564323EBB2380613046AEB83A4EF652F13AE55B35385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32