Overview

overview

7

Static

static

3

PineconeMC....3.exe

windows10-2004-x64

7

PineconeMC....3.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Qt6Core.dll

windows10-2004-x64

1

Qt6Core.dll

windows11-ltsc_2024-x64

1

Qt6Gui.dll

windows10-2004-x64

1

Qt6Gui.dll

windows11-ltsc_2024-x64

1

Qt6Network.dll

windows10-2004-x64

1

Qt6Network.dll

windows11-ltsc_2024-x64

1

Qt6NetworkAuth.dll

windows10-2004-x64

1

Qt6NetworkAuth.dll

windows11-ltsc_2024-x64

1

Qt6OpenGL.dll

windows10-2004-x64

1

Qt6OpenGL.dll

windows11-ltsc_2024-x64

1

Qt6Svg.dll

windows10-2004-x64

1

Qt6Svg.dll

windows11-ltsc_2024-x64

1

Qt6Widgets.dll

windows10-2004-x64

1

Qt6Widgets.dll

windows11-ltsc_2024-x64

1

Qt6Xml.dll

windows10-2004-x64

1

Qt6Xml.dll

windows11-ltsc_2024-x64

1

elyprismlauncher.exe

windows10-2004-x64

7

elyprismlauncher.exe

windows11-ltsc_2024-x64

1

elyprismla...nk.exe

windows10-2004-x64

1

elyprismla...nk.exe

windows11-ltsc_2024-x64

1

elyprismla...er.exe

windows10-2004-x64

7

elyprismla...er.exe

windows11-ltsc_2024-x64

1

iconengine...on.dll

windows10-2004-x64

1

iconengine...on.dll

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/07/2026, 04:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    PineconeMC-Windows-MinGW-w64-Setup-11.0.3.exe
  • Size 42.0MB
  • Sample260727-e3xcqsvyf1
  • SHA256 308d406ce8aafef3e4b4e1c81d97186c84e881c9de8d9e64719870db3d73d8df
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscovery

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Kills process with taskkill 1 IoCs
    defense_evasion
  • Modifies registry class 18 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PineconeMC-Windows-MinGW-w64-Setup-11.0.3.exe
    "C:\Users\Admin\AppData\Local\Temp\PineconeMC-Windows-MinGW-w64-Setup-11.0.3.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:3832
    • C:\Windows\SysWOW64\TaskKill.exe
      TaskKill /IM elyprismlauncher.exe /F
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:1336
    • C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
      "C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:2356

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Core.dll
        • Size 7.4MB
        • SHA256 e570e239af6abdea1e930dfb3c0d568c1ae3f87c34a4b02fd213284219050b34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Gui.dll
        • Size 10.4MB
        • SHA256 af7db34e128100d485a1bc49f28a4704186a40552bf3ee8d0fe7863e9c7e392a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Network.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Network.dll
        • Size 2.3MB
        • SHA256 900ff1b0cd76d698321e40f27da96c618275493588bfd76148067a227f26548b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6NetworkAuth.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6NetworkAuth.dll
        • Size 384KB
        • SHA256 ca8803cfbf3e6ac57d4e6501fd6c6ab2728f4b9384816bebb6d4b9ca4092469e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6OpenGL.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6OpenGL.dll
        • Size 3.3MB
        • SHA256 41aa14d55f031055c97b78eaaca14004fe61b6e0890256aa93907cb321af43f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Widgets.dll
        • Size 8.2MB
        • SHA256 d3a62cfeb078b83cbb0e02d7ac68e572eb341be904fcee46ec901b4853c8fb38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Xml.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\Qt6Xml.dll
        • Size 201KB
        • SHA256 f8460add5698dd144e090c72d2e31a7095d295b0b0d37735085df7c91ff15844
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elyprismlauncher.exe
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\elyprismlauncher.exe
        • Size 20.1MB
        • SHA256 241f9b459ea3eaa9f5574d97da76f8ae51ea3d74f9013e97fb364e3040790cd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libarchive-13.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libarchive-13.dll
        • Size 863KB
        • SHA256 5f2cce5eb71ca07a9e9cd44fb0383024992e6ade23d4d865833f88ca6244f16e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libb2-1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libb2-1.dll
        • Size 44KB
        • SHA256 7fd416e76828a2b99efca3d6c3eeab22b1cd2c51df74d813699cc68dd670277f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libbrotlidec.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libbrotlidec.dll
        • Size 60KB
        • SHA256 53be248c41da8fc7ffc9223b9b7825a0a6e825910769cec9faf88e3cbb791183
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libbz2-1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libbz2-1.dll
        • Size 96KB
        • SHA256 22289ed41efbe633f798047de836b31170336e5e40e7e7b586c915bdbda7fcd9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libc++.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libc++.dll
        • Size 1.6MB
        • SHA256 7344daed05388589e9bd691ed1d30c568c374da4b8b6a12e1502185948c03cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcmark.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libcmark.dll
        • Size 183KB
        • SHA256 0c1f91a943b6d0ede7973b658e63876e965d0f8724bc646e9782b36b6da20420
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libdouble-conversion.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libdouble-conversion.dll
        • Size 76KB
        • SHA256 9557a00cac2ca28afde918e617e9474300637ab04971b6c3c09d2935212a922f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libexpat-1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libexpat-1.dll
        • Size 213KB
        • SHA256 441fc64d24ab8edd07d3e5d83aa2fb24efea0f3b4455d2eeb6fb8948e84f95d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libfreetype-6.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libfreetype-6.dll
        • Size 824KB
        • SHA256 fee9b0490e5217611436a4686fd75f341ce5e8c531cdf127fbdf3ecd9226f929
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libharfbuzz-0.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libharfbuzz-0.dll
        • Size 1.4MB
        • SHA256 dc0aa91c58c711630235896aa5306dcf14ebe62f49578b7b4881c7e547941c1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libiconv-2.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libiconv-2.dll
        • Size 1.1MB
        • SHA256 c9f9b9addeac620eeccb6a23fc5a423fa1244e18431c00e1219db00d479ea332
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libicudt78.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libicudt78.dll
        • Size 31.6MB
        • SHA256 08b3d33d5007368e91179d17ac0f29df5e288ce7813fcca982f993dc949655b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libicuin78.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libicuin78.dll
        • Size 3.6MB
        • SHA256 90c08c6133cc4a79aeb37971d3dcccbc9c2a77bbee54c07ef6eef40de0e9ef61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libicuuc78.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libicuuc78.dll
        • Size 2.0MB
        • SHA256 e57ad30b09550f651affbc5ae55f103638641f6b7a89574b42aba389e809e26a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        liblz4.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\liblz4.dll
        • Size 185KB
        • SHA256 0eb2ba774e2030667ac9da915cb7b471bec3d7df9de1ccd887c846433815a811
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        liblzma-5.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\liblzma-5.dll
        • Size 196KB
        • SHA256 1ed55ccd06d239893b433bbe6a08c5d8f885ef53aed1ff155c1a41550af01916
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libmd4c.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libmd4c.dll
        • Size 83KB
        • SHA256 71e7c8f7e24627ea1ca6d4837553eec071d9becd39cc0ea567e6b58b3d2f326c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libpcre2-16-0.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libpcre2-16-0.dll
        • Size 694KB
        • SHA256 5241746e2f6aa7ed6b8c00074e5610a0b6571efc5c8ae8df92eb2ba54b2b4bf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libpng16-16.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libpng16-16.dll
        • Size 260KB
        • SHA256 ceecd14b5ff88105d21435a7c091e8634d3fc81498dfd2a005c2b1d4e14b5d15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libqrencode.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libqrencode.dll
        • Size 91KB
        • SHA256 9c901171ba8e4e07321e49048ff48b7a5f5042c24f796a87c36cc86413540961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libtomlplusplus-3.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libtomlplusplus-3.dll
        • Size 285KB
        • SHA256 30548799c2f8ffafa7fdf5cbeaa6fa067d3b1a16dfbada887c74e9dac1e6c5a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libwinpthread-1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libwinpthread-1.dll
        • Size 69KB
        • SHA256 1214e0dfd202048a8a518a921ce902781778fb8ce9370c575d66f8b09089565c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libzstd.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\libzstd.dll
        • Size 1006KB
        • SHA256 a4a29141c6dc489c59c260b5d4f781c195cea11ed231ee0cbfc6d3803b0708b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Programs\ElyPrismLauncher\zlib1.dll
        • Size 128KB
        • SHA256 94dd0a72d4da79e25294a91d1edf902d76eade7512d9218609a5fe43e3a7397a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsy2487.tmp\System.dll
        • Size 12KB
        • SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        modern-wizard.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsy2487.tmp\modern-wizard.bmp
        • Size 25KB
        • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsy2487.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsy2487.tmp\nsExec.dll
        • Size 7KB
        • SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elyprismlauncher.cfg
        • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
        • Size 30B
        • SHA256 e7bb8d933ad3397d35cf1706f0364ebab6b7c73b6b6846cdb0383db420c2cb25
        • MD5 SHA1 SHA512
        Submit Download

        elyprismlauncher.cfg.lock
        • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg.lock
        • Size 69B
        • SHA256 836b448a8b9b7ec8b0cb760d86a7acb03de282d86570d3ddc919ead1e775d193
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/2356-239-0x00007FFB48560000-0x00007FFB48BF0000-memory.dmp
        Download

        memory/2356-240-0x00007FFB48340000-0x00007FFB4855C000-memory.dmp
        Download

        memory/2356-235-0x00007FF653110000-0x00007FF6542D4000-memory.dmp
        Download

        memory/2356-232-0x00007FFB48560000-0x00007FFB48BF0000-memory.dmp
        Download

        memory/2356-236-0x00007FFB48170000-0x00007FFB4833E000-memory.dmp
        Download

        memory/2356-238-0x00007FFB47490000-0x00007FFB47A79000-memory.dmp
        Download

        memory/2356-237-0x00007FFB46920000-0x00007FFB46BEE000-memory.dmp
        Download