Resubmissions

20/07/2026, 18:13

260720-wtq8ssay2q7

20/07/2026, 18:12

260720-wtk2sacv8s

20/07/2026, 18:10

260720-wse45sax6r7

General

  • Target
    PrismLauncher-Windows-MinGW-arm64-Setup-10.0.5.exe
  • Size 42.0MB
  • Sample260720-wtk2sacv8s
  • SHA256 d9fa8b5792568df455a2f61521c0ae7facc7acfab7b1f2e2f41ed298c5cdca1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • PrismLauncher-Windows-MinGW-arm64-Setup-10.0.5.exe
    .exe 42.0MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • Qt6Core.dll
    6.7MB
  • Qt6Gui.dll
    9.3MB
  • Qt6Network.dll
    2.5MB
  • Qt6NetworkAuth.dll
    356KB
  • Qt6OpenGL.dll
    3.0MB
  • Qt6Svg.dll
    619KB
  • Qt6Widgets.dll
    7.6MB
  • Qt6Xml.dll
    195KB
  • iconengines/qsvgicon.dll
    66KB
  • imageformats/qgif.dll
    44KB
  • imageformats/qicns.dll
    53KB
  • imageformats/qico.dll
    47KB
  • imageformats/qjp2.dll
    48KB
  • imageformats/qjpeg.dll
    71KB
  • imageformats/qmng.dll
    40KB
  • imageformats/qsvg.dll
    36KB
  • imageformats/qtga.dll
    35KB
  • imageformats/qtiff.dll
    55KB
  • imageformats/qwbmp.dll
    34KB
  • imageformats/qwebp.dll
    43KB
  • jars/JavaCheck.jar
    .jar 1KB
  • jars/NewLaunch.jar
    .jar 13KB
  • jars/NewLaunchLegacy.jar
    .jar 23KB
  • libLerc.dll
    566KB
  • libarchive-13.dll
    775KB
  • libb2-1.dll
    43KB
  • libbrotlicommon.dll
    .js 141KB
  • libbrotlidec.dll
    55KB
  • libbz2-1.dll
    81KB
  • libc++.dll
    1.5MB
  • libcmark.dll
    158KB
  • libcrypto-3-arm64.dll
    4.6MB
  • libdeflate.dll
    84KB
  • libdouble-conversion.dll
    68KB
  • libexpat-1.dll
    177KB
  • libfreetype-6.dll
    755KB
  • libglib-2.0-0.dll
    1.6MB
  • libgraphite2.dll
    133KB
  • libharfbuzz-0.dll
    1.3MB
  • libiconv-2.dll
    1.1MB
  • libicudt78.dll
    31.6MB
  • libicuin78.dll
    3.5MB
  • libicuuc78.dll
    1.9MB
  • libintl-8.dll
    262KB
  • libjasper.dll
    386KB
  • libjbig-0.dll
    66KB
  • libjpeg-8.dll
    621KB
  • liblcms2-2.dll
    407KB
  • liblz4.dll
    155KB
  • liblzma-5.dll
    174KB
  • libmd4c.dll
    79KB
  • libmng-2.dll
    374KB
  • libpcre2-16-0.dll
    661KB
  • libpcre2-8-0.dll
    718KB
  • libpng16-16.dll
    237KB
  • libqrencode.dll
    83KB
  • libsharpyuv-0.dll
    32KB
  • libtiff-6.dll
    544KB
  • libtomlplusplus-3.dll
    267KB
  • libunwind.dll
    59KB
  • libwebp-7.dll
    450KB
  • libwebpdemux-2.dll
    25KB
  • libwebpmux-3.dll
    73KB
  • libwinpthread-1.dll
    70KB
  • libzstd.dll
    779KB
  • platforms/qwindows.dll
    1.6MB
  • prismlauncher.exe
    18.8MB
  • prismlauncher_filelink.exe
    777KB
  • prismlauncher_updater.exe
    1.5MB
  • qt.conf
    1B
  • qtlogging.ini
    609B
  • styles/qmodernwindowsstyle.dll
    237KB
  • tls/qcertonlybackend.dll
    107KB
  • tls/qschannelbackend.dll
    277KB
  • zlib1.dll
    102KB

PrismLauncher-Windows-MinGW-arm64-Setup-10.0.5.exe

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 d9fa8b5792568df455a2f61521c0ae7facc7acfab7b1f2e2f41ed298c5cdca1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths