Analysis

  • max time kernel
    150s
  • max time network
    147s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/07/2026, 04:28

General

  • Target
    elyprismlauncher.exe
  • Size 20.1MB
  • Sample260727-e3xcqsvyf1
  • SHA256 241f9b459ea3eaa9f5574d97da76f8ae51ea3d74f9013e97fb364e3040790cd2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\elyprismlauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\elyprismlauncher.exe"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4880

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        elyprismlauncher.cfg

        • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg
        • Size 30B
        • SHA256 e7bb8d933ad3397d35cf1706f0364ebab6b7c73b6b6846cdb0383db420c2cb25
        • MD5 SHA1 SHA512

        elyprismlauncher.cfg.lock

        • Path C:\Users\Admin\AppData\Roaming\ElyPrismLauncher\elyprismlauncher.cfg.lock
        • Size 69B
        • SHA256 fc7eab1cb7ee0d8da8dbadb847e9a4cd9fb768f50e98f9a568d269ba722500b8
        • MD5 SHA1 SHA512 TLSH

        memory/4880-4-0x00007FFD1E850000-0x00007FFD1EE39000-memory.dmp

        memory/4880-7-0x000001309F860000-0x000001309F870000-memory.dmp

        memory/4880-6-0x00007FFD24D10000-0x00007FFD24F2C000-memory.dmp

        memory/4880-5-0x00007FFD1E1C0000-0x00007FFD1E850000-memory.dmp

        memory/4880-0-0x00007FF6A4260000-0x00007FF6A5424000-memory.dmp

        memory/4880-3-0x00007FFD1D650000-0x00007FFD1D91E000-memory.dmp

        memory/4880-2-0x00007FFD1F8B0000-0x00007FFD1FA7E000-memory.dmp

        memory/4880-17-0x00000130A0BD0000-0x00000130A0BE0000-memory.dmp

        memory/4880-24-0x00000130A0BD0000-0x00000130A0BE0000-memory.dmp

        memory/4880-25-0x000001309F860000-0x000001309F870000-memory.dmp

        memory/4880-26-0x00000130A0BD0000-0x00000130A0BE0000-memory.dmp

        memory/4880-1-0x00007FFD1E1C0000-0x00007FFD1E850000-memory.dmp