General
- Target PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
- Size 22.9MB
- Sample260705-dfh16agy3s
- SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
- MD5 c9e517768e6f765d72bce0bfa55d5540
- SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
- SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
- SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
- TLSH T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
Resource
win11ltsc2024-20260629-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
- Size 22.9MB
- SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
- MD5 c9e517768e6f765d72bce0bfa55d5540
- SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
- SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
- SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
- TLSH T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1