Overview

overview

7

Static

static

3

PrismLaunc....4.exe

windows10-2004-x64

7

PrismLaunc....4.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Qt6Core.dll

windows10-2004-x64

1

Qt6Core.dll

windows11-ltsc_2024-x64

1

Qt6Core5Compat.dll

windows10-2004-x64

1

Qt6Core5Compat.dll

windows11-ltsc_2024-x64

1

Qt6Gui.dll

windows10-2004-x64

1

Qt6Gui.dll

windows11-ltsc_2024-x64

1

Qt6Network.dll

windows10-2004-x64

1

Qt6Network.dll

windows11-ltsc_2024-x64

1

Qt6NetworkAuth.dll

windows10-2004-x64

1

Qt6NetworkAuth.dll

windows11-ltsc_2024-x64

1

Qt6Svg.dll

windows10-2004-x64

1

Qt6Svg.dll

windows11-ltsc_2024-x64

1

Qt6Widgets.dll

windows10-2004-x64

1

Qt6Widgets.dll

windows11-ltsc_2024-x64

1

Qt6Xml.dll

windows10-2004-x64

1

Qt6Xml.dll

windows11-ltsc_2024-x64

1

iconengine...on.dll

windows10-2004-x64

1

iconengine...on.dll

windows11-ltsc_2024-x64

1

imageformats/qgif.dll

windows10-2004-x64

1

imageformats/qgif.dll

windows11-ltsc_2024-x64

1

imageforma...ns.dll

windows10-2004-x64

1

imageforma...ns.dll

windows11-ltsc_2024-x64

1

imageformats/qico.dll

windows10-2004-x64

1

imageformats/qico.dll

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    140s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/07/2026, 03:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    PrismLauncher-Windows-MinGW-w64-Setup-9.4.exe
  • Size 39.2MB
  • Sample260720-d66vxad18q
  • SHA256 9aed48d5474af122e6313125417240135f2468463ba343aab787742172fc57bd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscovery

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 58 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Kills process with taskkill 1 IoCs
    defense_evasion
  • Modifies registry class 12 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PrismLauncher-Windows-MinGW-w64-Setup-9.4.exe
    "C:\Users\Admin\AppData\Local\Temp\PrismLauncher-Windows-MinGW-w64-Setup-9.4.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:1612
    • C:\Windows\SysWOW64\TaskKill.exe
      TaskKill /IM prismlauncher.exe /F
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:3516
    • C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe
      "C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:1312

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Core.dll
        • Size 6.9MB
        • SHA256 22decda0b86cb688a9c1797ed7c8bff5b87c7d4bbd47ab4bbf7dbad0b119b844
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core5Compat.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Core5Compat.dll
        • Size 438KB
        • SHA256 20c2fafaa65a0f2c8799fd1d7581c9c72182df48712525544c33a5fa69d8be49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Gui.dll
        • Size 10.0MB
        • SHA256 bcf41c54be5950699df9d6f73fd5c5a60818629579152fc616b2f686b99fdb24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Network.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Network.dll
        • Size 2.5MB
        • SHA256 8bf208ffc73f428a9f0404c0bc493eb988acc91e3e08b881c4b41b960809b814
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6NetworkAuth.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6NetworkAuth.dll
        • Size 267KB
        • SHA256 507782ea9e2f402774306359c7cdb513b7444127e73d72378f4bdecf0121963b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Widgets.dll
        • Size 8.0MB
        • SHA256 e2a2763d34b6aab390e4b877b8f7958e26672ef2404f4e6fd62768de9a652d04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Xml.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Xml.dll
        • Size 199KB
        • SHA256 8c5aa65d263eefdec6fd811c944c8b4947dcc49a9996d0c6b9f1f5d2c549f17e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libb2-1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libb2-1.dll
        • Size 42KB
        • SHA256 d6754584336b179a02722cfb80854f764024b6649e6f0cbf2d3878407e5678af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libbrotlicommon.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libbrotlicommon.dll
        • Size 141KB
        • SHA256 3bd8713119997ef498b0628812b044a5ae94bedaa1bb245e4a48c2a645b5cdea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libbrotlidec.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libbrotlidec.dll
        • Size 59KB
        • SHA256 8afea614b6f3497747ee4b63282d84d6f4278cf1e24e2f14c3da7f542900ab5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libbz2-1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libbz2-1.dll
        • Size 96KB
        • SHA256 22289ed41efbe633f798047de836b31170336e5e40e7e7b586c915bdbda7fcd9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libc++.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libc++.dll
        • Size 1.6MB
        • SHA256 6b9a8de7f7c6e6aa59d6664dba9eabeaa190679e6ed1d4e7cae18a63968c76b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcmark.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libcmark.dll
        • Size 162KB
        • SHA256 9a963ab1392728007ac2c75e8c6d555aa48c8630e732071e36020a59cdd2f6d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libdouble-conversion.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libdouble-conversion.dll
        • Size 77KB
        • SHA256 8bcc90d3f9d41493c42ecadec47228e143d37a72a3bfe6dc804a83e3802a3627
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libfreetype-6.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libfreetype-6.dll
        • Size 825KB
        • SHA256 7d0b567583bf7c2e0d686f48cc69917a9ccc33830bdb9a1900455fc66f4b9fae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libglib-2.0-0.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libglib-2.0-0.dll
        • Size 1.6MB
        • SHA256 0de457ba15c3b702838c8522cbc7d92ae1a8e94f70dc3ab6037b0e2d2a0f42bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libgraphite2.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libgraphite2.dll
        • Size 149KB
        • SHA256 51ad68c31e706d4d9181cf3f15df259e5962644f664a3723d6ca48f0ef4fb8c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libharfbuzz-0.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libharfbuzz-0.dll
        • Size 1.4MB
        • SHA256 915c3ce239b7e005b0a7eec92c4b462cc2970d3efc2b7d3cc5c13c323af16819
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libiconv-2.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libiconv-2.dll
        • Size 1.1MB
        • SHA256 369b4e98d201cff25e928061621345ef6feb922deafe2cf263ec71a4876b29d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libicudt76.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libicudt76.dll
        • Size 30.4MB
        • SHA256 2c8af264b2f0b45f8482c82be01deb81ff931dbaa0263c2da5119995001c045e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libicuin76.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libicuin76.dll
        • Size 4.0MB
        • SHA256 2c65a7acf70447a40fe343f8fe71d850cdea7485543c19df0be146b810710311
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libicuuc76.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libicuuc76.dll
        • Size 2.1MB
        • SHA256 7ffad189afa2cfc0af750e543ab8165051004da1d58f059a65199039ce6cb0ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libintl-8.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libintl-8.dll
        • Size 208KB
        • SHA256 9a98170ee7229f5dde6ab1808a1ec1249b9d1a08099d48bcbb245998dead972c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libmd4c.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libmd4c.dll
        • Size 86KB
        • SHA256 c227e1585cc5454aa59273e97201b5a0db937755bbf399c44d97151ce0df7230
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libpcre2-16-0.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libpcre2-16-0.dll
        • Size 682KB
        • SHA256 8609e5c40789a7866583edfa365d8decc3767164a53379e78a542faa01bc60d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libpcre2-8-0.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libpcre2-8-0.dll
        • Size 747KB
        • SHA256 b6e843fec32086be8e867f6d0cddd18417c5d34ea56f3965dec765ba48b78c4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libpng16-16.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libpng16-16.dll
        • Size 258KB
        • SHA256 644b75c6e2e1872cf078b5af269eaabc0436203aefb5eb81c099a9790c2ce5f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libquazip1-qt6.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libquazip1-qt6.dll
        • Size 259KB
        • SHA256 c98aeb7d1a30ac71f1b89c02027050e30e0cdd1353332a2af340a5b30a747605
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libzstd.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\libzstd.dll
        • Size 992KB
        • SHA256 0fd8154ea0f57d35eba0ac39151da0bb88a38fa29a7f02b6bfa8ada05dbda5ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prismlauncher.exe
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe
        • Size 15.6MB
        • SHA256 728e8b1a5b95bf7ab6e9230a0edd4027f2ef387fed2123818c03448d5b1e6d07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\zlib1.dll
        • Size 108KB
        • SHA256 260997c016819f60cef902f3e7c0267804785d7b70c87cf541d0e40e6b693c75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsq4379.tmp\System.dll
        • Size 12KB
        • SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        modern-wizard.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsq4379.tmp\modern-wizard.bmp
        • Size 25KB
        • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsq4379.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsq4379.tmp\nsExec.dll
        • Size 7KB
        • SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prismlauncher.cfg
        • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
        • Size 30B
        • SHA256 9da99b49301ba83c33387e75d2028185562479e677b6afb110b4f8b098465807
        • MD5 SHA1 SHA512
        Submit Download

        prismlauncher.cfg.lock
        • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg.lock
        • Size 66B
        • SHA256 5fed9be6a59cdfb03d1c5e28dcb0ac714df0c65a2d405e2d1b8a7250ffc10c1c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/1312-212-0x00007FF7670D0000-0x00007FF767E3C000-memory.dmp
        Download

        memory/1312-214-0x00007FFC42AC0000-0x00007FFC42DF1000-memory.dmp
        Download

        memory/1312-215-0x00007FFC42FE0000-0x00007FFC43821000-memory.dmp
        Download

        memory/1312-218-0x00007FFC5EB00000-0x00007FFC5EB3C000-memory.dmp
        Download

        memory/1312-217-0x00007FFC5EA90000-0x00007FFC5EAF2000-memory.dmp
        Download

        memory/1312-213-0x00007FFC42E00000-0x00007FFC42FDA000-memory.dmp
        Download

        memory/1312-216-0x00007FFC43A10000-0x00007FFC44075000-memory.dmp
        Download

        memory/1312-198-0x00007FFC43A10000-0x00007FFC44075000-memory.dmp
        Download