f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6

Resubmissions

24/06/2026, 09:17

260624-k9bx9sbt2n

24/06/2026, 09:01

260624-ky2pjsbs5j4

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
Size 22.9MB
Sample260624-ky2pjsbs5j
SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
MD5 c9e517768e6f765d72bce0bfa55d5540
SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
TLSH
T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
- Size 22.9MB
- SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
- MD5 c9e517768e6f765d72bce0bfa55d5540
- SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
- SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
- SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
- TLSH
  T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery ransomware
behavioral1
- Target
  archive.dll
- Size 731KB
- SHA256 6ec07b7234d4cee6bae528f2ac619e3f2ac21c5570f0432276c795678eb3456e
- MD5 9801865f09659312a00d59d3d0531b3b
- SHA1 3d5dca77bd61a723dbe6790f48364fbb14d2a817
- SHA512 47800b36307049a86a3d74e62728544965de4421b0d4d6769358ff3105069db88db6d40a0a850b2a48970bbc45b244eb2f3bf0ae18046e1a1b7db028bace6d47
- SSDEEP 12288:GMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCcSzicsd:DSFVwT75qEtXm8KgQNjVTNjzxwjncri
- TLSH
  T1E6F48D82BBF40669E977C1348546AA27F3F1F0551760DBDF06A483653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bz2.dll
- Size 90KB
- SHA256 d984e746b33f24f531e2263ff69e80a126005a1f578d6c28f59dd2036c73c2e4
- MD5 d684863de5f0d90db4be1257ab2c065b
- SHA1 001b08f129104c9b34308de347e8f5b8acd7a45b
- SHA512 13667f196d5965dab1567232da486a271227aad71ef263a3247f7c31a9b9d0c5dd79275ecaf8b3f16c35292297fad063219e8cd2f0524997f967a55755dcd45d
- SSDEEP 1536:eBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLv+ti8y8d3S9ufIk9s:+uxAUhbrYVLvGVyh5
- TLSH
  T101936C44B6A6FB7EDE9BC43492620747FF34BE690B1117BB3560C2BA2B127D10E7411A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  cmark.dll
- Size 155KB
- SHA256 068156a998f79b1a815411bafad2af5369a109276cefba6517a72f28d56bbfa7
- MD5 8b74d6e906f91ec2d459fc58aabb7bdb
- SHA1 6ed805ded7c29feb55fb64707d64201b2094952e
- SHA512 48172de9ce9f92c1aee526257afb309bbfaa063109ef42a2c8654abd8d3ff8e9a58a5d0d87907739bb73ea983f53f3a8548b046c1253ebfd93f5bc6b2a8d1fd0
- SSDEEP 3072:H5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIit+Bm:fWcBSGsvVlFVtaOmROEit+I
- TLSH
  T14AF35B86E5BC0066CD1BE07C4D6EE586E3BAF2173310C2E716404E65B9E7BE27635352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  iconengines/qsvgicon.dll
- Size 73KB
- SHA256 19e4bd53020c303d011b663c292b78f190a3c8e25323303932b4e6043a7556b9
- MD5 08f2fb226d524554db2807402667213b
- SHA1 af348da509e945533820050421069e576b6c2736
- SHA512 91c00d3282d46cb43964bd1e7900d15f7d6670e54e222794f1d0d8bc1ca51d2cbb41351b6fc07da892f4346713a64b60614698c7ddd3928f293cf3cd32ef30b5
- SSDEEP 1536:kAaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbbd3S9mfIkxw:3a6jmZh9poUhDu2o5bB+imfbUx
- TLSH
  T10D738D4727681049DC6BC23DC367CA47FE72B6526762EBDF12A1C5222E63BC05B78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  icuuc.dll
- Size 51KB
- SHA256 33324e7fd0c14be10a5411ec6c8162def947b5e7e0c8e2ee89985066ce10c217
- MD5 e61c7267d96f7a129389fbaadf301ed7
- SHA1 132acf3af4c264401910bb5c5cfa683f6e276a0b
- SHA512 5ac4ab24b45101d52ae2a80d359caaba656bbe2e9bb9f33c40a190a88c8adc7cecd171adfc1d113c9a26605ae36253976a986c2df9d5ed6628e6571d04127813
- SSDEEP 768:aCFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mrKduegc2Ip4gAN:v/prGPh7tm8T9ZKd3S9gMfIkEk
- TLSH
  T190332A4DC8184F52D3A3DF3EA6B8B92F69314AD7BE68FB74ADA4C58001C538D12B4356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  imageformats/qgif.dll
- Size 50KB
- SHA256 84c6ad888945fda29f65418867d573e7f89a1263d84efc0d116579d04c1ecfd7
- MD5 0d2356fcb7a47b9d524fd463d14df008
- SHA1 b6df49e118c5050f063736e3eb60ac2bf5980916
- SHA512 b4baa3e4d43941772e4e4589508c3ab47e911d8225456aec795bea5c9fc87dc8ae5a66507ed98a6bb056ff732712d43619b0207fdfc38023db051caf8617ed32
- SSDEEP 1536:wTVMkw3j3fDpP2pcsEX7cnWwd3S99TfIkik:wTs3fD9mcsEX7cnWL04
- TLSH
  T1AD338EC6AB6440D6D5938230C596CE9BFAB5BBA25B51C7EF0161C25D0E237C17F38329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  imageformats/qicns.dll
- Size 58KB
- SHA256 3736119adb644c8908447b036c07d7a2a95e057d7e515553471d5a77acf6f67c
- MD5 ad2f46afd039ae5b1d908b70f3800b19
- SHA1 4dc79ba911e866c20b21d311e1e99ff6faa901bc
- SHA512 290e718aaadcd5dbaa3ff8560d29cabdc501b4ab9539ad8b93fbbff4b99c4bbae584cfe6a9920757c26d2b34f97a0dbe5dd115439671d3e3d33655a18eec0885
- SSDEEP 1536:EHy2+up1dsYzCqj7JkO4eX6sOSVBpTJbd3S9+fIkeJ:+N+uGYzn7JosOSVBLkx
- TLSH
  T1A7437C07A3A98286D553C6B0C246CAB7E672F5435B928BDF0161C62D1E233E1BF7D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  imageformats/qico.dll
- Size 48KB
- SHA256 0eaa77f93b7545f3ceddc887455eb8ef77622c41231932901a03b6b6dc103a19
- MD5 71499b86040f7659d17b9db3970b4c97
- SHA1 6e209981f69852530d47cea6155955189ac599e4
- SHA512 9a1e379fd2a160a7f8015feeaffe92588c80bf08ff5b0cdeb9471a118fd6ca8b0276e2e02b54cdefcb745b54c68008aaa2cf1461cc7269cc24173a70eb0f70d2
- SSDEEP 768:lrYUBUjz9OXYC2x5XtuPvHeTLXwWyduegc2Ip4PTxf1mlIJflenp:zBUjz9OIP5duPvHeTLXwWyd3S91fIkfO
- TLSH
  T176237D86923D4186EA63C774C596CE63F5B9F3A29B52C7DF01A2860A0D273D1BF38354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  imageformats/qjpeg.dll
- Size 567KB
- SHA256 292c97d445e61921856d96f4d57cf9119328b49dadde97c151013017dc89d7fd
- MD5 d751bb5544c7c8d7ecc8b70c95c49052
- SHA1 f4c7e70ae1062b7271c76d93001b69979b3d36c7
- SHA512 5a7ce34a52d721605d20eaacb378a79a94d8eccf5d16db7b9822e133c2f8b97155786cf7f7477fd7efaed1d9c59a374c9eb648e0760404581d391fab844fb9bf
- SSDEEP 6144:8g2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbz:tfrS9ECMren
- TLSH
  T1BEC42942F6B51841C7A68878DE1AC966EB91781D03F58AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  imageformats/qsvg.dll
- Size 41KB
- SHA256 776c6296e036eb8abf9acdab76bbe7d6647c8641d74e4948b7a4c2c9be395d96
- MD5 0abe102938e002f7aea3aa5c2eb973bc
- SHA1 8e1d1293e8561b9804769441300ff3a20d315a90
- SHA512 19d0d21665e261a01c393c17922dad76e413701402d468aac3c5b9d562ea64f18092018c454d7f4ca31abc22e66f2abe919fe793a38b656479f7a557b631e4ad
- SSDEEP 768:ISi7nr/w0rAkuV2O4L5blG7uK5gScduegc2Ip4dTxf1mlIJVlenIOH:Irr/w2AkuV2O4L5blG7uK5ncd3S9XfI7
- TLSH
  T189134A8BDA2C4087E563D270C589CF52F47AF69247629BCF25A382590D673C1AF3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  imageformats/qtga.dll
- Size 40KB
- SHA256 950f3864d5c71629751446bf36442c460d685100253bd38a6a56aca8391b6a14
- MD5 5e4356bdfa1fc8ce0b9661c47fd10b56
- SHA1 2c4275d38de9c1124145bd5a9f0df9ec8b2caf6c
- SHA512 0d91267a168ac3d34ba3262add54fe1dc805538e255158d5f352bb491ff129256a520e43b210d364732646a26e0e5519b778360bd33be8892fd6c03eaa74ac6b
- SSDEEP 768:+kK60f5ksBejVX47kqfNZKduegc2Ip4nTxf1mlIJ6lenHMZ:X+usB8VX47kqfNZKd3S9NfIk6+M
- TLSH
  T100137D869B284083D653D670D282DE47F975F7A29B22C7CF51A5838D0E273C1AB3D35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  imageformats/qtiff.dll
- Size 434KB
- SHA256 692be97877d0b987e65317de2237f9a6deda7da07ddea750114ddab7af602a21
- MD5 3ddd03ec6125dd6946be8abc1f9a3c95
- SHA1 e6a3c54331e6d61ac9d2c948eb3c03f8b1ff5b59
- SHA512 05bda0105f334659cf275def982a91d98eb4e9288878d711aef270d6d0c18e88b43dbdfc3f6ad82a0b9fe7609de93ed9048f35a6e676a3856eaf407e00a461d9
- SSDEEP 6144:m7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhk:I69ZYmmGq/Q3DbnzHk
- TLSH
  T12C94B505DED049ABD872813456E7C652F273F4853B12CB8B9698B1353F127D026AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  imageformats/qwbmp.dll
- Size 39KB
- SHA256 f19e3889e5676d179ee30c3507678b3562f4ccbcce25fd2b30bd94e2b152c0b0
- MD5 d0770da01ba9294e91907cb68288fe35
- SHA1 bc2525a10db502729ecc74a6e46dc6ae5425e0c8
- SHA512 d0fdc688b586f9c1eaa0dfd510f97724c64f9796ca5c9983ccd62c430ad34e57e9be5d97b95ce3d9b150d0d9998efb09e7425a121766fac5aaab2b2d81deed07
- SSDEEP 768:UaVooyFmtxWX2xyjnl2OYomrduegc2Ip4qMJTxf1mlIJdlenf2:7LyExWX2xyjnl2OYomrd3S9R7fIkd1
- TLSH
  T10F035BA69B6D8182E613DB70C186CE53E975F7A34B52C7CF11B2828E0D273C1AF38255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  imageformats/qwebp.dll
- Size 552KB
- SHA256 6b3fc96932d1054d3d56226d35a45b14b35ea0ae2084eedc7c01cb65ab6a2aab
- MD5 4594c421754600eb7672914ec16718bc
- SHA1 b7bf77f4dd25b2a8a233c69ab90c07aa5b571df6
- SHA512 7f99594ab0730260aad3ef0b4aab45b0593a71427a8d740d2a589f3dace824d526f168437bae7bc1fb0e3ddba48747823c8698a0881fff7368e0de847c6beb69
- SSDEEP 12288:8WhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518sg:8WhBPLrLrLrLWCYNVhA6Z9mun518sg
- TLSH
  T1BBC47C8ED99623D8D49BC4B88AFD965BF6A43C1D434095EB17D0B9293A33BC05737B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  jars/JavaCheck.jar
- Size 1KB
- SHA256 cc732ab7504afc2c01ddb28e3f5da38dc96a707f3acccbd9ea022e7747fb5bb7
- MD5 4a08d7813a7d4c8fa3fe7d39556ff6a5
- SHA1 6a03a8fd64f9ea948926877b6aa77ba029893121
- SHA512 7fe87e5ddc6c0e2f62cb3115e954b3544170afb35bce40a651fb63802c63b7f03669792200cfdae24c8a0dce5ba2805fa1b5064a8dbae7155489eb0e6be7b1bb
- TLSH
  T1602120457FD8C062F71B94BBD650B253853F2120955DD10307C82A544C24BC85A238CA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  jars/NewLaunch.jar
- Size 13KB
- SHA256 ad9eed5899ab84530d4e2a5bd71cc64abdd67d3c081c3b58f52bcd143b0fcd6b
- MD5 734473a6e4bfeebbf51029336885caf3
- SHA1 40a1f025eedaa0a65aaaab433524ffb7a9e01761
- SHA512 55d6d5efe18c514cf18d84b94d657b863cfc91517ae047dc2ffeb370827f57c8e475a976a77fef453fb81c5371b21383214f1725a24dca8aef753b9319ba54c1
- SSDEEP 384:DUtvof8bfWN0TUaqdiW1C5Eq4pBMYYCmOWz:gtwfcWCTOsENr/7Wz
- TLSH
  T17C527C15AB97C8A4F413877481C587AB7CA57680A0F2B1321FB69695482CEDC5E8BF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  jars/NewLaunchLegacy.jar
- Size 23KB
- SHA256 a1841f4b859113d870d7a9234934cd89bc9a8f0886b68216b9dc392af23a595b
- MD5 a9484e7375b70d038bbe50db58ba62b0
- SHA1 a4d4d3b94167a36794d7ea0661709232babc23e1
- SHA512 18d6d8f1fe7697bd7c55e1330bcfc0829c59731e6ea6148c4eea2101d7b2a5372b2437a9f26b0cea767b5b5bb948b2331bc76eb7f1866aa90473bcf95e84cbc0
- SSDEEP 384:iwIRidu8LAkHUwnFdSoKD4aR0K1Yp0oSUP7mMM+KOy/2lQuBgG:/IRSu8LAk0wFdS34+Kp0ormMFKOy/2lV
- TLSH
  T116B29E27B786C891E917863AC94FC71B1E95200CC0BCB466AC790BB51C9CDEE2B075E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  liblzma.dll
- Size 199KB
- SHA256 56840943bcd48d9e7960f1495dfce153bdce10f0f3e25b95c7d82c662dfe5723
- MD5 8eb454bb23b9356c2453703f5ff68be5
- SHA1 3fbbdeaacd852ab9786dc9202c095989498a95df
- SHA512 0944600b8733bb0b97a53eb5aba6e018cbb85c51b2d7fb7a056882c2947319f987ff3def92ce21b8c67629ac2e880abb3af5d91e19386121828df06644617a9e
- SSDEEP 3072:Q9w3e7cqOlgA0xUaotDWg+/rXaHaA1HRg7GWUs9mNo+sowfXisTS:Q9wuf45dsgka1HudYO+3wf7S
- TLSH
  T15D1439A562A5F0D2E2678C34C6678B17E7F678040310A6EF05DC93BD262FBE4563A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  lz4.dll
- Size 138KB
- SHA256 3bc341550859d446aeb213b53af4f1107583c2ca11201172088a2062ab3d6a0d
- MD5 9d1a0f650d348ab1fdc66cc23df5c48e
- SHA1 949c8ec502842f3d84e9f1fc5a38c6fc86ee7133
- SHA512 fcdbd7a9e07a2867812a6f5b8c6362f6bd6ede7e07fc16ee34bb3f4546c6cbcf68b6e55c57e20418822e54ad6963f8b6103524bc77a3286aaf6f75543a51c905
- SSDEEP 3072:Xs8r+jQPM8eFnR6bWuzTy0A58gY1glRr5d:Xr+j78eFnUbnTy78S/n
- TLSH
  T180D37C87F7A4109DE153D0BA96D6864BF674B9522311AFE743E8CE712E13E908E33352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  lzo2.dll
- Size 127KB
- SHA256 a145665acf1ae5ff753b67422d890b593f0328def3ce5929c68bee043716f010
- MD5 a43ed98f0330c248977b4cbd83b7a259
- SHA1 adb1026af6a4adb1e2f5bb71b160593e1a88dada
- SHA512 58cda4ea75c8b2cc0f8da6323ebf2cc6153acc779aa664c64c277124090114e4baee4d87ca32b2d16f2332246a81d2305dc181196ec402d3bca2a1c2accb5a77
- SSDEEP 3072:BsSxM+h7JWygE0lE6OEb/Ex0JgxiLxKkv8wrGdTo:R7MdEiE/ELES2xiLxKkvRGNo
- TLSH
  T13BD38E59F1C65068DDE7C2388A9AD2C6F676B4480310ABEF16D1E97A2F43FC58E35324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  platforms/qwindows.dll
- Size 977KB
- SHA256 1c0a55d290a19d44b002f0e34b92cd112dec54af30a283ba15ff103f14376a60
- MD5 d004a943d6dd3baaea3b1e32d93ac257
- SHA1 b832667c806cfd07a6be82fce04ebc99e4c13e7b
- SHA512 59337d227fc9df84e0a52b3270ab0bd554212c1a5fc3bfa16f95e4a0bf2c8758f3b6d95cb3f396e637bc0ec85fda913d58a71ef91af6cb290a13b0e8d31ccbe2
- SSDEEP 12288:sEhqYCXtrx8ASfukqEZ8l4382P3Q464RSQivRYt/3:sEh5aOXfukqNl43Nh64z8W3
- TLSH
  T187256C1F63A80255E83AC17ECE5B8713D6B2746903A186DB0161CE197F337E32A3DB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  prismlauncher.exe
- Size 9.2MB
- SHA256 ba72817825e0bfcba7633a607eba38611929446dda6ad47ef38bb432b5b66cd6
- MD5 ec4eeae9225be174e71b33e8fe7f5716
- SHA1 f767d93ccc317515f69a3f907cacb2fb278b4476
- SHA512 46a3119d5527fe6dbdc103a9708783de50f61b913ac9aae6c18920b726bebcb05ecd38ef5712a3ecb68b1242d0d93c3d63ab6e9d9291756977f5910b6d88d415
- SSDEEP 49152:gzegKRVRDGGrrozp1C5UF3Ozhja4IJvW6yj0g9/Qb96wED4ZZgVi3X9fUVNdrdlC:jDj4wBrYpgb3z6cn+HPiNklsndxa
- TLSH
  T181A6AE5F677802E0D139C278DB4A1593E27578234320D9EB711DEEA69F335E22E3DA48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  prismlauncher_filelink.exe
- Size 107KB
- SHA256 c93e65b30cfe7988c7497326693bed13d6e8bcc1ab30c6bdf70decffd6182b3b
- MD5 60e76bb12ccfb2cc3c52a321972a29ec
- SHA1 165844f71ea785e083ad5d02269c5699e9cac81a
- SHA512 273ad56e8b850a981671f099844bdabceb20389bd81b4574d8b4d573f6f2105cd783dd4350cfd95fec1151d470f1ba13b7ce946404fe95125d2015437bccee22
- SSDEEP 1536:a3pyeQEjQoRulbD++c8dyZt0xrpYDMXDrwaVQd3S9wfIkoMF:avQq6D++c80ZWR6wXDJVHY
- TLSH
  T105B36CBF762C01E5F566D278C7DB8652E337709907208BEF035186A60E267E89F3CA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  prismlauncher_updater.exe
- Size 413KB
- SHA256 dfb9bec3d3cd007d0e56bacbef64517dd9a9855aa20f5bf1d401f937ca329e95
- MD5 81d669b1d993db5e233a105643704c60
- SHA1 24fb62172566996b22bbf83673328513e938c86c
- SHA512 f079b23c6fecc2e282dd853ae31c937dcaef6bb0c13597fd4c120abac4b2639f42afb1af8d5412fa7905fa5e2037ba491fc6879eacd01bb82b9a09d35b13d92e
- SSDEEP 6144:ZIac3vwLFn/PxwNMT35n3orCXBjmHYw5D40ZvJEdDiA2ozNKu6XahZvRapborb8S:ZI9wLF/P+rinOXTFm
- TLSH
  T15094392EEE5A02E5F565D07CCBAFC612D17370DE47A286FB022D89261E272D57D3C608
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  qrencode.dll
- Size 62KB
- SHA256 8b3fbbdad47c3b8ab98422968e28c134beefa2e78b01e1b8c3618981ed417b99
- MD5 446ef55022ff2c5ed026f13ad1c4d4e0
- SHA1 8ca230231b0b851451da46133f5e04e4bc1d0024
- SHA512 4caded094e70b566c21084955200cf8e7d22bf3c1c1aef0fa25863a97a56280f0f4f099bbd48c4726644681d42afc95298e5dac99e427d1f530f76564226e6a7
- SSDEEP 768:cyXjbYUZqkAvg5Lv/xiHrWlvKUYX5VAdPTLSriqWsmeS2duegc2Ip4D1oTxf1mlE:cWnJZv7gLP3GPTLSvnS2d3S9CfIbHnnA
- TLSH
  T166537DCA7A6C0189E6574634C2D7CA87F57176931B419BCF1790A7960B33BC2AB7A30C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  styles/qmodernwindowsstyle.dll
- Size 219KB
- SHA256 6e67cb13cfecd187574747c7a04a3d56ebc1143dcb91d553a52d4a23be5c637e
- MD5 0a19eda2b9daf5a3d9f1f327c667e95b
- SHA1 ac2b87738db8c766512b89a7f69a591a08c3d8d7
- SHA512 8dd0cc37658b1012901c3108562285dfa0c24ef1190716bf175173e8b28f28b5af1887eb11b6c61af50068f956298d90aec9be6d50170078dcc5551b04a6ed11
- SSDEEP 6144:C4vKeYVVMifp1yq9uT/ocMIhw5oL5bQ/Z/P9tlJaH9TpIF:C4vSVOihh
- TLSH
  T15D244943329612C6C967D2B8C90B5613F67330A8032696FF4167DEB42F633E2BD39661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  tls/qcertonlybackend.dll
- Size 104KB
- SHA256 d4628216ccd71009a07890b9eefa88582753a1e6f789a37f2714c7512ed2366c
- MD5 6b52cdb9727732594cc906560222064b
- SHA1 b0170d2431ca5e7b0132542cf5b0e0d6b0161bc2
- SHA512 d08e955a6c3d487912b65c76637e6607a12c89faca53f1638dec0a431f995b0fa4277845b0e7a773cfe8c6f6a4ae77cbe3bc1196b2a661041296ac5299dd0082
- SSDEEP 1536:SdV2ODzyJnNUC8Qh3ye7zjmydnrWK9uyR47sPZ3ZfAWt1cBF8j1Md3S9kJfIkwnC:Sd0q8V8Qh3y4zjbnrwsvSBg1L5C
- TLSH
  T163A37B47629401D6EA6AD278C713CC47E3B9B08657229BFF41A1DA560F27BF29F3C214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  tls/qschannelbackend.dll
- Size 260KB
- SHA256 bec85280f4430c2b1b688f4628c98ac6e6930f254a0891773d4a6a6330494847
- MD5 b2f8815dd4175e68ef3c4e4e680cfbc2
- SHA1 3c07c932bc6774d77d27451c40d868a7f73c33fa
- SHA512 a69d0d34b987bdde0d5ffe388db8045e9f6ae73655e2924183e818d2aeaaca58179307719318e117046abb64ab4ebeaa00706ca0e16f5dda2ef76e4d6680715f
- SSDEEP 6144:U+VXglMW11bIQIT1eov0AkuVeT9cF07Qnc74CpNZy:JVXCX19ov0GVVFcUu4
- TLSH
  T18644386722940E95FC6BC078CA4BC807E6B370965362DBEF5221C95A1F63BF2B53D250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  tomlplusplus-3.dll
- Size 391KB
- SHA256 0267a2177a1824ada67eb32ca0ee72481309977264c57a6a61f73771306eff56
- MD5 4a115e67d8767dbdc3f8fe647df222f1
- SHA1 d5199214bccd5fb58482cec0f86d57b02d63e771
- SHA512 0c3183fca7687838cb7312f201f87627e9afd34d2ef52b1f0dc4c0ee16a5a37b3dc6681a641895c961fc47370a0c51ef2cce1a8f226b75a88ef416c70202be67
- SSDEEP 6144:bv80P99pO6Zds36KshHf2rHDf0oTph0lhSMXlBXBWfXvjd4J8M6:tPHdVQ9Tph0lhSMXl+XAk
- TLSH
  T10D849E17FB152076C16AC2BCEAEE4641E7B2BC85834167CF17D995A25F13BC06E3BA04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  zlib1.dll
- Size 103KB
- SHA256 445934e9afce00dde9d49de424f08114ecf9bb27c9a9261576d3be60738ef082
- MD5 49a1eeecb25ef4879ba30feb262a2ba5
- SHA1 2c7926d3c31c72a201b2f42b8ebb618d77856241
- SHA512 f2ba2d45fbe1dd75f1c37a6bee2d7faf7640091743ed38ed13b2eb5993ca41d84afb1f5cba8f5e2574d4bea99300bfd8735303d69394f4a11919d43fa4c338bf
- SSDEEP 1536:6vEyaXGzTqbvqRfSOzhppf/ISUaYuOlqjebaIOcIOZFdGULmd3S9KfIbHhnJd:tdXozVhppnURkeboSZFdGULzTh
- TLSH
  T1C2A3AF896A7412A6D6F38570D4D28B9EE334B15507A04BDF5188A39A1F13BE02F393FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  zstd.dll
- Size 657KB
- SHA256 932e4b1429ec5ae2185fabb195f0293c0ef006bdcb754b5a769af4b6454d1183
- MD5 30595f661acdb3de8c215ff336bf8c81
- SHA1 363fca913674a1f43a3717e86ad643e492695876
- SHA512 8884fabf1d39c6bff3a5dcac41e9aa02722f0a8dc590292c81f281426b83832cd66fc2debebd9f1d94a67885ae47299bd80648158c02434b1439915ac55e0fa3
- SSDEEP 12288:0kY/0hUaFMJEOQzB8JGKnBxc1+yOdu5Io6H0LokbT:0b/0hlKnBxc1+yOdO7Lokn
- TLSH
  T1C3E49E83F29992EDC13FC579C5564363EBB2380613046AEB83A4EF642F13AE55B35385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32