f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
Size 22.9MB
Sample260629-pg6z6ac161
SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
MD5 c9e517768e6f765d72bce0bfa55d5540
SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
TLSH
T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
- Size 22.9MB
- SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
- MD5 c9e517768e6f765d72bce0bfa55d5540
- SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
- SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
- SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
- TLSH
  T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
- MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
- SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
- SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
- SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
- TLSH
  T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Qt6Core.dll
- Size 9.8MB
- SHA256 f9040715d72532f35a1cdd418b7c9cac8b2ca4aab22e6e098d7849a9ffea5620
- MD5 6d3ad600618f8faddff23897dd2b77ff
- SHA1 ab63324286795450aad3dc3b9cdca366dcbd3ad6
- SHA512 397fd2f86851b3494b2d4b8ef25357e2572f0ac82f533d8ca11990c2ed5bc6517f1f15f2049f3795e8c28bca20258a920baf0635c8852ca5c74755aa586be7eb
- SSDEEP 98304:8VLKyLebAofeVMKFdu9CwJsv6t6mJMSKgVcC/3cQ:yWPBSMKFdu9CwJsv6t6mSStZ/3Z
- TLSH
  T102A6390766FA0011FAFBDA34DAB75112DBB27C466B3496DF025861185E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 ab8e16ca1f087753b216490b217e6edf13754e5a303c577fe6475150e3706ef4
- MD5 3e7556d434872f7337cdbd9c6c3bb4b8
- SHA1 b3a3591e9b6605bc4b2bf33eaae18a9cef6ddd1d
- SHA512 3e89a3afdf219ee73de2535e7e453eee6ba29fb860757857318614e2e286cf66ed788744681ff468d7158f0c8f564bc21b2aab79cd2ce72a8ee266d7fca3421d
- SSDEEP 98304:/17B8zKQ16be6OAZl5XWv7StQiYBNXcqQYOPTmex:v6ie6ZZTdtQiYBNMVPTmC
- TLSH
  T13FA68D57A2A911D8D57BD13CCB9B9517EBB2701503629BDB02A0CA152F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 440d4a640216b6ce66d5d7c1229f741619b5eec17b78aec5be2c31aab36b3419
- MD5 e4e52b0c7e90a7711f8596ee429d8a85
- SHA1 8e2b0cb78d6e2bb6271eab4aa8ef582946119521
- SHA512 1c4f4aff0d7369eb04ea4a897394f7e1a0b0ea0a0177b7bdbc6d267e857b75f44e9788012bea7966679967bffd984b476d45785e697be2603b7b4afbd96a61bc
- SSDEEP 12288:Q9onO5TLgx8PlBYyrw3hutJJ5za2rJq9OeBEd4yhexi9TQ75L3EXpX1m1:h83gxGmFRiJJ51rJq9OvdDhOi+75mXI1
- TLSH
  T1F8856C57A3A441D6D46ED139CB4B8A0BF772700583669BDF02658E152F73BE22B3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Qt6NetworkAuth.dll
- Size 289KB
- SHA256 81d0b91e4a4742cf1247e97ac70cbb95ce5f10c1c8ea20c8d06153d6148372d4
- MD5 3055ae403f7f9bf557f903ed348fa723
- SHA1 0ef7dcf68e1abfaa8c721c453f67a0f821fef8c6
- SHA512 28e9fbf352eaa70a4166be59bc142737da5a52a7adbe2e629a8b472e5f55fcc5a168ab535b643bf993002bca4743cefb38a9f51dc3473d9674ad63674c05c3bf
- SSDEEP 3072:2PntlHGgash+B1RBKQ5NSuxBqcKu215Pdp8CqhwoLW1kJERAXWBJnuo1kIuxmwBA:I/+B5N5Bqcf215PdpToyyiuGux9BEB
- TLSH
  T166542857A3A20DC2DC2BC179C65B8613E6B3B4004752CBEF46658B4A1F677E2BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Qt6OpenGL.dll
- Size 1.9MB
- SHA256 220587b7473d8698d98119250a8f3d11aba0d4545f0a2a245513100a65e5574c
- MD5 97b1482c09c0318e709ba1b1dcd0a849
- SHA1 ae57cfc7a6df4f9cb1d4702b7314ca2c0dd770b1
- SHA512 2336e1c5b83e2e5c80d420fc44bed80cec9a0564057c6a24fc4e9aec621fba699630fe16e6147aa9aef22e9613aa48736069404e80ab73975272b3f026104fe4
- SSDEEP 12288:PyA2ngdKBJuEum86y+TjfI1CkX9RDYXKI297FcVlE/LY9Q2:4aYum9V/feRzDYucGLY9T
- TLSH
  T1F295FFD5624AB622C976E2BE934F057E60F3AD53C3424BC388155B490AB57EE0B7FC06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Qt6Svg.dll
- Size 620KB
- SHA256 5b737e7dfc163855696120551818b23021000b1a0ad86eaea982394f9ffa15b6
- MD5 7e281e5bdf6815cd46566e2630751bda
- SHA1 2e70980289326ba2e2fc26e06ff152b1924fc4c7
- SHA512 f3a92fb54f2228e6c93a21d096dd1ea33b813bff3ae01875ebfb522ce50fea9aa6ea3c8e9eb428dbc9d595e3624593fded1a68b2aef1ec84cd4166f65de82243
- SSDEEP 6144:Y10fGG/FNHToqobivsTRkcjIfIl3mIRuo2zibhHmCBGyOkOc0CH4x5Yj7Fm3yWZI:Y10e+NH0xb7rZmIRWWZmCRmc0mx57
- TLSH
  T18BD45D67B3A60786D4AAD13CCB5B8422EB7370440362D7EF41B58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 b0b0786a526c2b8cee270ba663323b6d039bf97acb68bf66b072fb5737759244
- MD5 b6410aa11ec4d685997e0b8ee11e299c
- SHA1 77a764ce1636c69834bed2f08631bca588e25d48
- SHA512 8e5c1eae1cfa6faee61d6e5dedf281a789cc53c5cff05ce52551f649feda2e97d1dab8163ab31cc60f15b50157a50d5d5c39f2ce790214ec8807dd8d23be4509
- SSDEEP 98304:RLNqD/uTGvqxgiJaj4mxHJpd9tozE2XJHTYm:hNqDaGvqxgiJajFxHJpd9tozE2XJzl
- TLSH
  T143667B5763EA0185C5AFD13DCB0B8A17E6B2700443229BCB1169CE592F73BE16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Qt6Xml.dll
- Size 159KB
- SHA256 1ab2179c16cc54db8702791cbe323aca0a4681ecbc5a8214a5e580eb2e62a7cd
- MD5 fc36f5ef938f3553889c19e4618a0840
- SHA1 8f9fb2c35731b00f81105b0344dee8d918153f3b
- SHA512 0f76b59fef859d5db077f5b37ac7df3c551c2af0d3c5ec8481663a4b1d57d3abd4dcf5718863e911ab159512f978fd79cc638242ce396456950d7a779e5cc67f
- SSDEEP 1536:O7LLdm+5hICv8Q0wCslIfO80V+NFu4jRcDXIDlvxe2obYTQj9sYpxABNqEd3S9c4:OrfA7QIm/VWRcDXIDa29YjAPqbTl
- TLSH
  T198F34B8773684286D56AC278CA0B490EFB73709197129BEF81658A352F63FC27E7D350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  archive.dll
- Size 731KB
- SHA256 6ec07b7234d4cee6bae528f2ac619e3f2ac21c5570f0432276c795678eb3456e
- MD5 9801865f09659312a00d59d3d0531b3b
- SHA1 3d5dca77bd61a723dbe6790f48364fbb14d2a817
- SHA512 47800b36307049a86a3d74e62728544965de4421b0d4d6769358ff3105069db88db6d40a0a850b2a48970bbc45b244eb2f3bf0ae18046e1a1b7db028bace6d47
- SSDEEP 12288:GMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCcSzicsd:DSFVwT75qEtXm8KgQNjVTNjzxwjncri
- TLSH
  T1E6F48D82BBF40669E977C1348546AA27F3F1F0551760DBDF06A483653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  bz2.dll
- Size 90KB
- SHA256 d984e746b33f24f531e2263ff69e80a126005a1f578d6c28f59dd2036c73c2e4
- MD5 d684863de5f0d90db4be1257ab2c065b
- SHA1 001b08f129104c9b34308de347e8f5b8acd7a45b
- SHA512 13667f196d5965dab1567232da486a271227aad71ef263a3247f7c31a9b9d0c5dd79275ecaf8b3f16c35292297fad063219e8cd2f0524997f967a55755dcd45d
- SSDEEP 1536:eBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLv+ti8y8d3S9ufIk9s:+uxAUhbrYVLvGVyh5
- TLSH
  T101936C44B6A6FB7EDE9BC43492620747FF34BE690B1117BB3560C2BA2B127D10E7411A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  cmark.dll
- Size 155KB
- SHA256 068156a998f79b1a815411bafad2af5369a109276cefba6517a72f28d56bbfa7
- MD5 8b74d6e906f91ec2d459fc58aabb7bdb
- SHA1 6ed805ded7c29feb55fb64707d64201b2094952e
- SHA512 48172de9ce9f92c1aee526257afb309bbfaa063109ef42a2c8654abd8d3ff8e9a58a5d0d87907739bb73ea983f53f3a8548b046c1253ebfd93f5bc6b2a8d1fd0
- SSDEEP 3072:H5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIit+Bm:fWcBSGsvVlFVtaOmROEit+I
- TLSH
  T14AF35B86E5BC0066CD1BE07C4D6EE586E3BAF2173310C2E716404E65B9E7BE27635352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32