Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
27/07/2026, 04:28
General
- Target elyprismlauncher.exe
- Size 20.1MB
- Sample260727-e3xcqsvyf1
- SHA256 241f9b459ea3eaa9f5574d97da76f8ae51ea3d74f9013e97fb364e3040790cd2
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\elyprismlauncher.exe"C:\Users\Admin\AppData\Local\Temp\elyprismlauncher.exe"1⤵
- Checks computer location settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
elyprismlauncher.cfg
elyprismlauncher.cfg.lock
memory/1528-3-0x00007FFD37890000-0x00007FFD37B5E000-memory.dmp
memory/1528-4-0x00007FFD39050000-0x00007FFD39639000-memory.dmp
memory/1528-6-0x00007FFD37D30000-0x00007FFD37F4C000-memory.dmp
memory/1528-7-0x000001A35BE90000-0x000001A35BEA0000-memory.dmp
memory/1528-1-0x00007FFD389C0000-0x00007FFD39050000-memory.dmp
memory/1528-2-0x00007FFD37B60000-0x00007FFD37D2E000-memory.dmp
memory/1528-5-0x00007FFD389C0000-0x00007FFD39050000-memory.dmp
memory/1528-17-0x000001A35BF30000-0x000001A35BF40000-memory.dmp
memory/1528-25-0x000001A35BF30000-0x000001A35BF31000-memory.dmp
memory/1528-26-0x000001A35BE90000-0x000001A35BEA0000-memory.dmp
memory/1528-33-0x000001A35BF30000-0x000001A35BF40000-memory.dmp
memory/1528-0-0x00007FF6FECB0000-0x00007FF6FFE74000-memory.dmp