General
- Target PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
- Size 22.8MB
- Sample260727-rnpqkabe35
- SHA256 6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4
Malware Config
Targets
-
- Target PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
- Size 22.8MB
- SHA256 6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target $PLUGINSDIR/NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6Core.dll
- Size 9.8MB
- SHA256 e898be1717f33e5be968a5d07c56f6cdf6f236c7888bebf3ada8db55a72dff0f
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6Gui.dll
- Size 9.1MB
- SHA256 f872c2b0f6a8aa92c80006dc272f2af0137f1172510a07e5687dd23b9e84d048
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6Network.dll
- Size 1.7MB
- SHA256 c99cdc8fe49d4ffef4585616181e977674ffddf5c83e04f8a7bfa710ef7a113c
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6NetworkAuth.dll
- Size 289KB
- SHA256 f72beabb77f4212b2121f29fe6a905860922fc96e065e391e606e7edc57a2970
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6OpenGL.dll
- Size 1.9MB
- SHA256 74bae72a5e3059b47d7213dc0c05319cbf2e27004c96197e35cff6b58f72d83d
Score1/10 -
- Target Qt6Svg.dll
- Size 620KB
- SHA256 f753e3ecab676c13afacc3ce384a67e882f61245451358da643c190ad4b0d028
Score1/10 -
- Target Qt6Widgets.dll
- Size 6.3MB
- SHA256 96e9e1514101f4a4fad67a7e34aa2b8c2ec135f4eeb7f56ec26f3e00bd97c1fb
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6Xml.dll
- Size 159KB
- SHA256 543669c722f33a40dbafab441e1590a0d8aaa48b17db66a64a7db32e4cccd721
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target archive.dll
- Size 731KB
- SHA256 812e646111face02ae8492d39582bce216845568513b72ada52cb2c4ca0b3f40
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bz2.dll
- Size 90KB
- SHA256 39a7d40a7dcf21fc6b09352907465e941a1a6799aa28f6c0d7875785d33e12e2
Score1/10 -
- Target cmark.dll
- Size 155KB
- SHA256 85618e723dc422d863765a427c8fb905d2b26aa3f8f7ad6bdf21441dc488c973
Score1/10