9aed48d5474af122e6313125417240135f2468463ba343aab787742172fc57bd

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MinGW-w64-Setup-9.4.exe
Size 39.2MB
Sample260720-d66vxad18q
SHA256 9aed48d5474af122e6313125417240135f2468463ba343aab787742172fc57bd
MD5 baecd47c694f7b604028abde3798fbf4
SHA1 4803ccb353e3867b484a3869fe63d27fd0ddb471
SHA512 8b4124e3a27bcc5c6be0b7ad864b09f1630b6a699267c5ad10e1bef8bbdc8513742a8a9a5130b049fda8a8e9fd66298b56625ca683af108d264356a682241d44
SSDEEP 786432:ts6GK6F7RCeU6l2cg2GTw4c5DmUqO4mqynsU12RPoUHrZw:tBGK6FEEUjTwm9xRBPoUH9w
TLSH
T1259733CE63B40055C18F4F34D6A990C1694D6D1752F1F8BBEA36F2D6ACF9AD9068E80C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  PrismLauncher-Windows-MinGW-w64-Setup-9.4.exe
- Size 39.2MB
- SHA256 9aed48d5474af122e6313125417240135f2468463ba343aab787742172fc57bd
- MD5 baecd47c694f7b604028abde3798fbf4
- SHA1 4803ccb353e3867b484a3869fe63d27fd0ddb471
- SHA512 8b4124e3a27bcc5c6be0b7ad864b09f1630b6a699267c5ad10e1bef8bbdc8513742a8a9a5130b049fda8a8e9fd66298b56625ca683af108d264356a682241d44
- SSDEEP 786432:ts6GK6F7RCeU6l2cg2GTw4c5DmUqO4mqynsU12RPoUHrZw:tBGK6FEEUjTwm9xRBPoUH9w
- TLSH
  T1259733CE63B40055C18F4F34D6A990C1694D6D1752F1F8BBEA36F2D6ACF9AD9068E80C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Qt6Core.dll
- Size 6.9MB
- SHA256 22decda0b86cb688a9c1797ed7c8bff5b87c7d4bbd47ab4bbf7dbad0b119b844
- MD5 faef417172baa5faf77f3783a8945c0a
- SHA1 7dd129bdedd0faa4cc6af0b98feecb6aac3aa8ff
- SHA512 f0ee213bf9f8b206964b55abdfc1452518f29decb9adaf7714aefcd77f88ba34f768d726a007f64845f3a31b35db96d31011c39a2dea5077a8453ef0a63766bd
- SSDEEP 98304:K2HBN5hJ12sRMuXb9xEd6aKFdu9CwJsv6tvBsS81JKEE3tB9LyXU8UFgsJJ:K2f77nrQKFdu9CwJsv6tv
- TLSH
  T177767D42B292C199F8ADD334CD872322F9727C528B3699AB47C05B356D67BE9173E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Qt6Core5Compat.dll
- Size 438KB
- SHA256 20c2fafaa65a0f2c8799fd1d7581c9c72182df48712525544c33a5fa69d8be49
- MD5 9e5c8c9380c5dd6350a4bef00f1e7c1f
- SHA1 cdbac85129de8e4805c066bf979a30a50abfeb83
- SHA512 899ffaf4ce1618a8a9a5f92920c13d0a3f36577faa28f8c6488689393e97b7239e05b56cbb7326da8c5d6d78dfd04f41feb50c5fa3f8fdc73c96db12d9d815bb
- SSDEEP 6144:a9ExRkxXALgFSrukur6kUTejitcWkR+2GpTT:sEmALCSzLmjI2GpTT
- TLSH
  T1DC942852F640589CF428DA38CEA74722F976BC955776A9FBA65047342EA3FF01B38304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Qt6Gui.dll
- Size 10.0MB
- SHA256 bcf41c54be5950699df9d6f73fd5c5a60818629579152fc616b2f686b99fdb24
- MD5 962b7a68c3ed33001137d9cc8947e892
- SHA1 76918a4b0b02b442c4d34e3677cd049617ba0f48
- SHA512 69b8039e54a909e1c92e90d813754fdc5763c010c329550a042b1c5f9178496489d49a7f80e365f38525b7411e363e827c1f79678ea46e1754743ad9108914a1
- SSDEEP 98304:2BAVMUqiy0DzRAYXRyb8DGgU9PK9awOF5PKHEADbbJv8fGcg:CAPqczRAYXRykbyWcmBJ
- TLSH
  T12EB65C42F642959DF81AE6388A876322F53178454737A9EB57C08B393EB3BD0173EB05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt6Network.dll
- Size 2.5MB
- SHA256 8bf208ffc73f428a9f0404c0bc493eb988acc91e3e08b881c4b41b960809b814
- MD5 c48e7c25ce9a6b68cc4acd732e15e7f3
- SHA1 aa66a606d147757f3462fe832427d7c1ffe217c2
- SHA512 1cb883101fffe440c5130db0ff61fbe9514e0921fa9e37bdbe76e21de173ad032baa2925d3750b850424784c1cd9034277b759ac52f7bda9aa6f1e522a2db785
- SSDEEP 24576:8V+Sbw1vd+IBL2z0t0QQBaTRnhUrydqt1NttL/ywRPqu:8V+Sbwb+IXthuaT5h3uNPL//RP1
- TLSH
  T100C53B42B2519A9AF85ED734CAC76316F93178018B37A5EB4B808B792EA7FD1133D341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Qt6NetworkAuth.dll
- Size 267KB
- SHA256 507782ea9e2f402774306359c7cdb513b7444127e73d72378f4bdecf0121963b
- MD5 8556961fbc2440c8e29272d0cb3772ae
- SHA1 d7f8137383c59aefc9e7427a542361c4e62291cf
- SHA512 5e10f867f8b498bf98bcf578e9bf9dc0d73df23e0fe782e54ed733bee853e62acac27b0a11d14ef4d60b1143359aed9459affd055477d09abf0e303798fed309
- SSDEEP 6144:7vUO/s1rr6t4GxAeCupOufZtVIaEo20YJ9h/n:LVs1rr6t4aCupuZ9h
- TLSH
  T1E9441B52A345829AEC5AD679DDC75332F536B9004B3BACEB4B4043B51E9BBD12B3C780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Qt6Svg.dll
- Size 561KB
- SHA256 f62ef6afc26e0e2204f30842684a84f3f08597a3eaae06c7fe7bf7c90ce20aa7
- MD5 0855e1854d173f137d755cfede92c503
- SHA1 41ed5e03f8d2b14b031de7ec79b27561352c2312
- SHA512 3da4e5b130621a6d54e9643a2dccb783ecf42fca91cc3256a41fc2ece937aa4300e15408f831afc4f79386ebb77a12696ac3bb5b70575e6b69db406defb57e6e
- SSDEEP 12288:vbCR0llnSA76T8lkGUOO4/gJHZ+Zfyjg:vbC+llnSA7k8lTQ4WUyjg
- TLSH
  T179C41852E342489DF895C63CCA876622FA327C04177AA4E75B909B346EE7BF4533DB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Qt6Widgets.dll
- Size 8.0MB
- SHA256 e2a2763d34b6aab390e4b877b8f7958e26672ef2404f4e6fd62768de9a652d04
- MD5 a814f2729b48bb6077c06bb1bc750991
- SHA1 4b45220550000098e3bdc906c45e4358c85a7787
- SHA512 58559a123d80e6f6ad281c8b994efbefbd6c82f45710b56dc2b34c8ed5e5ad681eaf5b55ddaa5aaee9475357b6780322cbc2e72931f8cb5e158948cf2fa229d3
- SSDEEP 98304:IVF6te2OeW6y84B2RMqa9yfGUZEzrA++AG/42P0hjM/5z+LWB03t:4eaByGc+2PCY/5G
- TLSH
  T1A4864B42B242959DE85EDA38CAC75322F9317C858B37A9EF478047752EA3BE0173E705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Qt6Xml.dll
- Size 199KB
- SHA256 8c5aa65d263eefdec6fd811c944c8b4947dcc49a9996d0c6b9f1f5d2c549f17e
- MD5 35722cd3c79e2b16a0b671efc56fe36a
- SHA1 c922bd68116d8ad7019f6ac245febd11adb7f3e2
- SHA512 dcc5cd53eade3f9a5d26b29853729ecbc19820a1c0a8c0510b92db456eb845902e8a899bee837e141f4a9fe1691e287452c032b6defe3e670a9641c8df2fb2fd
- SSDEEP 3072:a2Fjg1gVwISAEYemk5pes7srtpOkit+GSEqv:a2wpUEYY50ptpOZtk
- TLSH
  T1A814C4A3B296C59EFC9AD634889B032AF575B8811B3758FBDA9046341E67FD4133DB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  iconengines/qsvgicon.dll
- Size 69KB
- SHA256 9d77e862ee1f4f8879b01b7081b18af602440d01d9d6aecb5c78692f58d6bd51
- MD5 5d90c85b3a233feb908a2849cda6d2bd
- SHA1 cafb3f1d086638afd2f7ca6dcb95445f186df94b
- SHA512 40cd8b9c21480b9e89ad41a2af4591d16abcb8b1714b1a6821fbac980f3bf8a4af41bd14c8c73bf855be6393fd43c3ba84d32bb0910f8d6e0eb3a1b4a9eab0d8
- SSDEEP 768:FGsPAaQd6hzoPBqPa3ruTa3cuutCKF02o6yYymLvP66dr/1nniqtIZNUEGhbUB/h:rAaQQ9okbiFcJ1VtWNtPB/lanlvHoCW
- TLSH
  T179632B62A745528EE89BD73DC5CB1363F836FC411B2B98EB469092352EA7FD41338781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  imageformats/qgif.dll
- Size 45KB
- SHA256 c11ed1ddc5cdecddb5c2b15c32c06b24001616def51d344baf43de45d977cc07
- MD5 0ba04074e2ffc1855bd9090f9767a279
- SHA1 b0cbf993f1aad5f9df6b973a13d88946c267a810
- SHA512 db9355121a5f9aea4f08625b6023802b2e6fe86f93eadd0b97adc45bedf43937ef31c6063b45002e65c094031c6c7d83eb2c30e4e04d23cba541a8f320370954
- SSDEEP 768:JMfKDxp46ksrNxB1hxBtIm5w3emI7Jo30YEkAXFL77sU:ifKz46r5dBtJ5YeZDVL7
- TLSH
  T1722319A2AB59865FE897C778CDCB0762F438FD415B3399DB472052382E72BE41234B45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  imageformats/qicns.dll
- Size 54KB
- SHA256 ef5023ac2e50e4bb27123f25a42f58e69f10f417d012efe0ab956c7f22444768
- MD5 1f68fb9b7f755cfd4e6d04b21d8e1a98
- SHA1 c65e01063449d0374ef163740fc3b71a9d5a2b1c
- SHA512 bd72e03374f964ac3fbdaa71bd0ebb38f5c2d101e4ad8ba1ec83e3108abbcc98a6cae937ab4749dd4ab7f7583aad5f9d3b04949b4a2f2f270a0db0d6510effdf
- SSDEEP 768:AVRp93ezR0A+hQpJwb3f/GtwuYREHLeS:up9OzmJcJMGt5+EHLeS
- TLSH
  T16A430722E758859AEC96C734CADB0772F635FC424B23A4EF4B5097392E63BE05638741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  imageformats/qico.dll
- Size 48KB
- SHA256 d2e0b5467b7f5c1ebab4b3b6ae5ff48cb0d2753ceb51d1626d3eea518a3f1598
- MD5 1c7e60e2754fcac60954dcc4a81cfff3
- SHA1 821c3b961a00fce9cfcc2ae03d3b35d69d551c3a
- SHA512 bb829b35c08f982006d5ce374c84cbe2c361c6fb8c8086d048309c6def756ac56656c773887d8d067cdecb722dcb127396af93fb66e5eee66d2654f04b735b70
- SSDEEP 768:BY/i4MCDWOh1izkNBheAlCVrR4CEpJPttNtfFgx67I67fTtIIjJ6yJL7:+/Xd5eAlsben5fTtRJ6yJL7
- TLSH
  T15723C562DB588A9EFDA6CB79C5C70762F139FD110B2395DB0A64423A1E73BE40B34781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32