f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
Size 22.9MB
Sample260810-t58acaytex
SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
MD5 c9e517768e6f765d72bce0bfa55d5540
SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
TLSH
T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
- Size 22.9MB
- SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
- MD5 c9e517768e6f765d72bce0bfa55d5540
- SHA1 0a578425ed863b4d0b971a90331ea4ae2d3aecac
- SHA512 d5703c2a7b5c4b5aa416f987ac2bf6e5e4759619b0d96a0d0c9e583a259c649c31552a96f6cd81486d974df3944f17cbde3d15a2a078822e6fe3a2948ce5b694
- SSDEEP 393216:+bKjTvdjxZcD3Oj/6E2aHd/08sNkkdgxe6Vzu/cUGRoPeN2L3vaqNACcspokbGrs:+YTtmLE1SbNVKxe/8qg2mCcsaiPGAgdg
- TLSH
  T1323723DE73740044C18E0F749A9A51C0790E6D6727F0E87BEA76F4CAACB4ACA45DE91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery
behavioral1
- Target
  $PLUGINSDIR/NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
- MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
- SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
- SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
- SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
- TLSH
  T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Qt6Core.dll
- Size 9.8MB
- SHA256 f9040715d72532f35a1cdd418b7c9cac8b2ca4aab22e6e098d7849a9ffea5620
- MD5 6d3ad600618f8faddff23897dd2b77ff
- SHA1 ab63324286795450aad3dc3b9cdca366dcbd3ad6
- SHA512 397fd2f86851b3494b2d4b8ef25357e2572f0ac82f533d8ca11990c2ed5bc6517f1f15f2049f3795e8c28bca20258a920baf0635c8852ca5c74755aa586be7eb
- SSDEEP 98304:8VLKyLebAofeVMKFdu9CwJsv6t6mJMSKgVcC/3cQ:yWPBSMKFdu9CwJsv6t6mSStZ/3Z
- TLSH
  T102A6390766FA0011FAFBDA34DAB75112DBB27C466B3496DF025861185E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 ab8e16ca1f087753b216490b217e6edf13754e5a303c577fe6475150e3706ef4
- MD5 3e7556d434872f7337cdbd9c6c3bb4b8
- SHA1 b3a3591e9b6605bc4b2bf33eaae18a9cef6ddd1d
- SHA512 3e89a3afdf219ee73de2535e7e453eee6ba29fb860757857318614e2e286cf66ed788744681ff468d7158f0c8f564bc21b2aab79cd2ce72a8ee266d7fca3421d
- SSDEEP 98304:/17B8zKQ16be6OAZl5XWv7StQiYBNXcqQYOPTmex:v6ie6ZZTdtQiYBNMVPTmC
- TLSH
  T13FA68D57A2A911D8D57BD13CCB9B9517EBB2701503629BDB02A0CA152F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 440d4a640216b6ce66d5d7c1229f741619b5eec17b78aec5be2c31aab36b3419
- MD5 e4e52b0c7e90a7711f8596ee429d8a85
- SHA1 8e2b0cb78d6e2bb6271eab4aa8ef582946119521
- SHA512 1c4f4aff0d7369eb04ea4a897394f7e1a0b0ea0a0177b7bdbc6d267e857b75f44e9788012bea7966679967bffd984b476d45785e697be2603b7b4afbd96a61bc
- SSDEEP 12288:Q9onO5TLgx8PlBYyrw3hutJJ5za2rJq9OeBEd4yhexi9TQ75L3EXpX1m1:h83gxGmFRiJJ51rJq9OvdDhOi+75mXI1
- TLSH
  T1F8856C57A3A441D6D46ED139CB4B8A0BF772700583669BDF02658E152F73BE22B3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Qt6NetworkAuth.dll
- Size 289KB
- SHA256 81d0b91e4a4742cf1247e97ac70cbb95ce5f10c1c8ea20c8d06153d6148372d4
- MD5 3055ae403f7f9bf557f903ed348fa723
- SHA1 0ef7dcf68e1abfaa8c721c453f67a0f821fef8c6
- SHA512 28e9fbf352eaa70a4166be59bc142737da5a52a7adbe2e629a8b472e5f55fcc5a168ab535b643bf993002bca4743cefb38a9f51dc3473d9674ad63674c05c3bf
- SSDEEP 3072:2PntlHGgash+B1RBKQ5NSuxBqcKu215Pdp8CqhwoLW1kJERAXWBJnuo1kIuxmwBA:I/+B5N5Bqcf215PdpToyyiuGux9BEB
- TLSH
  T166542857A3A20DC2DC2BC179C65B8613E6B3B4004752CBEF46658B4A1F677E2BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Qt6OpenGL.dll
- Size 1.9MB
- SHA256 220587b7473d8698d98119250a8f3d11aba0d4545f0a2a245513100a65e5574c
- MD5 97b1482c09c0318e709ba1b1dcd0a849
- SHA1 ae57cfc7a6df4f9cb1d4702b7314ca2c0dd770b1
- SHA512 2336e1c5b83e2e5c80d420fc44bed80cec9a0564057c6a24fc4e9aec621fba699630fe16e6147aa9aef22e9613aa48736069404e80ab73975272b3f026104fe4
- SSDEEP 12288:PyA2ngdKBJuEum86y+TjfI1CkX9RDYXKI297FcVlE/LY9Q2:4aYum9V/feRzDYucGLY9T
- TLSH
  T1F295FFD5624AB622C976E2BE934F057E60F3AD53C3424BC388155B490AB57EE0B7FC06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Qt6Svg.dll
- Size 620KB
- SHA256 5b737e7dfc163855696120551818b23021000b1a0ad86eaea982394f9ffa15b6
- MD5 7e281e5bdf6815cd46566e2630751bda
- SHA1 2e70980289326ba2e2fc26e06ff152b1924fc4c7
- SHA512 f3a92fb54f2228e6c93a21d096dd1ea33b813bff3ae01875ebfb522ce50fea9aa6ea3c8e9eb428dbc9d595e3624593fded1a68b2aef1ec84cd4166f65de82243
- SSDEEP 6144:Y10fGG/FNHToqobivsTRkcjIfIl3mIRuo2zibhHmCBGyOkOc0CH4x5Yj7Fm3yWZI:Y10e+NH0xb7rZmIRWWZmCRmc0mx57
- TLSH
  T18BD45D67B3A60786D4AAD13CCB5B8422EB7370440362D7EF41B58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Modifies file permissions
  discovery
- Downloads MZ/PE file
behavioral11
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 b0b0786a526c2b8cee270ba663323b6d039bf97acb68bf66b072fb5737759244
- MD5 b6410aa11ec4d685997e0b8ee11e299c
- SHA1 77a764ce1636c69834bed2f08631bca588e25d48
- SHA512 8e5c1eae1cfa6faee61d6e5dedf281a789cc53c5cff05ce52551f649feda2e97d1dab8163ab31cc60f15b50157a50d5d5c39f2ce790214ec8807dd8d23be4509
- SSDEEP 98304:RLNqD/uTGvqxgiJaj4mxHJpd9tozE2XJHTYm:hNqDaGvqxgiJajFxHJpd9tozE2XJzl
- TLSH
  T143667B5763EA0185C5AFD13DCB0B8A17E6B2700443229BCB1169CE592F73BE16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Qt6Xml.dll
- Size 159KB
- SHA256 1ab2179c16cc54db8702791cbe323aca0a4681ecbc5a8214a5e580eb2e62a7cd
- MD5 fc36f5ef938f3553889c19e4618a0840
- SHA1 8f9fb2c35731b00f81105b0344dee8d918153f3b
- SHA512 0f76b59fef859d5db077f5b37ac7df3c551c2af0d3c5ec8481663a4b1d57d3abd4dcf5718863e911ab159512f978fd79cc638242ce396456950d7a779e5cc67f
- SSDEEP 1536:O7LLdm+5hICv8Q0wCslIfO80V+NFu4jRcDXIDlvxe2obYTQj9sYpxABNqEd3S9c4:OrfA7QIm/VWRcDXIDa29YjAPqbTl
- TLSH
  T198F34B8773684286D56AC278CA0B490EFB73709197129BEF81658A352F63FC27E7D350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  archive.dll
- Size 731KB
- SHA256 6ec07b7234d4cee6bae528f2ac619e3f2ac21c5570f0432276c795678eb3456e
- MD5 9801865f09659312a00d59d3d0531b3b
- SHA1 3d5dca77bd61a723dbe6790f48364fbb14d2a817
- SHA512 47800b36307049a86a3d74e62728544965de4421b0d4d6769358ff3105069db88db6d40a0a850b2a48970bbc45b244eb2f3bf0ae18046e1a1b7db028bace6d47
- SSDEEP 12288:GMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCcSzicsd:DSFVwT75qEtXm8KgQNjVTNjzxwjncri
- TLSH
  T1E6F48D82BBF40669E977C1348546AA27F3F1F0551760DBDF06A483653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  bz2.dll
- Size 90KB
- SHA256 d984e746b33f24f531e2263ff69e80a126005a1f578d6c28f59dd2036c73c2e4
- MD5 d684863de5f0d90db4be1257ab2c065b
- SHA1 001b08f129104c9b34308de347e8f5b8acd7a45b
- SHA512 13667f196d5965dab1567232da486a271227aad71ef263a3247f7c31a9b9d0c5dd79275ecaf8b3f16c35292297fad063219e8cd2f0524997f967a55755dcd45d
- SSDEEP 1536:eBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLv+ti8y8d3S9ufIk9s:+uxAUhbrYVLvGVyh5
- TLSH
  T101936C44B6A6FB7EDE9BC43492620747FF34BE690B1117BB3560C2BA2B127D10E7411A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  cmark.dll
- Size 155KB
- SHA256 068156a998f79b1a815411bafad2af5369a109276cefba6517a72f28d56bbfa7
- MD5 8b74d6e906f91ec2d459fc58aabb7bdb
- SHA1 6ed805ded7c29feb55fb64707d64201b2094952e
- SHA512 48172de9ce9f92c1aee526257afb309bbfaa063109ef42a2c8654abd8d3ff8e9a58a5d0d87907739bb73ea983f53f3a8548b046c1253ebfd93f5bc6b2a8d1fd0
- SSDEEP 3072:H5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIit+Bm:fWcBSGsvVlFVtaOmROEit+I
- TLSH
  T14AF35B86E5BC0066CD1BE07C4D6EE586E3BAF2173310C2E716404E65B9E7BE27635352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  iconengines/qsvgicon.dll
- Size 73KB
- SHA256 19e4bd53020c303d011b663c292b78f190a3c8e25323303932b4e6043a7556b9
- MD5 08f2fb226d524554db2807402667213b
- SHA1 af348da509e945533820050421069e576b6c2736
- SHA512 91c00d3282d46cb43964bd1e7900d15f7d6670e54e222794f1d0d8bc1ca51d2cbb41351b6fc07da892f4346713a64b60614698c7ddd3928f293cf3cd32ef30b5
- SSDEEP 1536:kAaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbbd3S9mfIkxw:3a6jmZh9poUhDu2o5bB+imfbUx
- TLSH
  T10D738D4727681049DC6BC23DC367CA47FE72B6526762EBDF12A1C5222E63BC05B78321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  icuuc.dll
- Size 51KB
- SHA256 33324e7fd0c14be10a5411ec6c8162def947b5e7e0c8e2ee89985066ce10c217
- MD5 e61c7267d96f7a129389fbaadf301ed7
- SHA1 132acf3af4c264401910bb5c5cfa683f6e276a0b
- SHA512 5ac4ab24b45101d52ae2a80d359caaba656bbe2e9bb9f33c40a190a88c8adc7cecd171adfc1d113c9a26605ae36253976a986c2df9d5ed6628e6571d04127813
- SSDEEP 768:aCFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mrKduegc2Ip4gAN:v/prGPh7tm8T9ZKd3S9gMfIkEk
- TLSH
  T190332A4DC8184F52D3A3DF3EA6B8B92F69314AD7BE68FB74ADA4C58001C538D12B4356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  imageformats/qgif.dll
- Size 50KB
- SHA256 84c6ad888945fda29f65418867d573e7f89a1263d84efc0d116579d04c1ecfd7
- MD5 0d2356fcb7a47b9d524fd463d14df008
- SHA1 b6df49e118c5050f063736e3eb60ac2bf5980916
- SHA512 b4baa3e4d43941772e4e4589508c3ab47e911d8225456aec795bea5c9fc87dc8ae5a66507ed98a6bb056ff732712d43619b0207fdfc38023db051caf8617ed32
- SSDEEP 1536:wTVMkw3j3fDpP2pcsEX7cnWwd3S99TfIkik:wTs3fD9mcsEX7cnWL04
- TLSH
  T1AD338EC6AB6440D6D5938230C596CE9BFAB5BBA25B51C7EF0161C25D0E237C17F38329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  imageformats/qicns.dll
- Size 58KB
- SHA256 3736119adb644c8908447b036c07d7a2a95e057d7e515553471d5a77acf6f67c
- MD5 ad2f46afd039ae5b1d908b70f3800b19
- SHA1 4dc79ba911e866c20b21d311e1e99ff6faa901bc
- SHA512 290e718aaadcd5dbaa3ff8560d29cabdc501b4ab9539ad8b93fbbff4b99c4bbae584cfe6a9920757c26d2b34f97a0dbe5dd115439671d3e3d33655a18eec0885
- SSDEEP 1536:EHy2+up1dsYzCqj7JkO4eX6sOSVBpTJbd3S9+fIkeJ:+N+uGYzn7JosOSVBLkx
- TLSH
  T1A7437C07A3A98286D553C6B0C246CAB7E672F5435B928BDF0161C62D1E233E1BF7D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  imageformats/qico.dll
- Size 48KB
- SHA256 0eaa77f93b7545f3ceddc887455eb8ef77622c41231932901a03b6b6dc103a19
- MD5 71499b86040f7659d17b9db3970b4c97
- SHA1 6e209981f69852530d47cea6155955189ac599e4
- SHA512 9a1e379fd2a160a7f8015feeaffe92588c80bf08ff5b0cdeb9471a118fd6ca8b0276e2e02b54cdefcb745b54c68008aaa2cf1461cc7269cc24173a70eb0f70d2
- SSDEEP 768:lrYUBUjz9OXYC2x5XtuPvHeTLXwWyduegc2Ip4PTxf1mlIJflenp:zBUjz9OIP5duPvHeTLXwWyd3S91fIkfO
- TLSH
  T176237D86923D4186EA63C774C596CE63F5B9F3A29B52C7DF01A2860A0D273D1BF38354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  imageformats/qjpeg.dll
- Size 567KB
- SHA256 292c97d445e61921856d96f4d57cf9119328b49dadde97c151013017dc89d7fd
- MD5 d751bb5544c7c8d7ecc8b70c95c49052
- SHA1 f4c7e70ae1062b7271c76d93001b69979b3d36c7
- SHA512 5a7ce34a52d721605d20eaacb378a79a94d8eccf5d16db7b9822e133c2f8b97155786cf7f7477fd7efaed1d9c59a374c9eb648e0760404581d391fab844fb9bf
- SSDEEP 6144:8g2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbz:tfrS9ECMren
- TLSH
  T1BEC42942F6B51841C7A68878DE1AC966EB91781D03F58AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  imageformats/qsvg.dll
- Size 41KB
- SHA256 776c6296e036eb8abf9acdab76bbe7d6647c8641d74e4948b7a4c2c9be395d96
- MD5 0abe102938e002f7aea3aa5c2eb973bc
- SHA1 8e1d1293e8561b9804769441300ff3a20d315a90
- SHA512 19d0d21665e261a01c393c17922dad76e413701402d468aac3c5b9d562ea64f18092018c454d7f4ca31abc22e66f2abe919fe793a38b656479f7a557b631e4ad
- SSDEEP 768:ISi7nr/w0rAkuV2O4L5blG7uK5gScduegc2Ip4dTxf1mlIJVlenIOH:Irr/w2AkuV2O4L5blG7uK5ncd3S9XfI7
- TLSH
  T189134A8BDA2C4087E563D270C589CF52F47AF69247629BCF25A382590D673C1AF3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  imageformats/qtga.dll
- Size 40KB
- SHA256 950f3864d5c71629751446bf36442c460d685100253bd38a6a56aca8391b6a14
- MD5 5e4356bdfa1fc8ce0b9661c47fd10b56
- SHA1 2c4275d38de9c1124145bd5a9f0df9ec8b2caf6c
- SHA512 0d91267a168ac3d34ba3262add54fe1dc805538e255158d5f352bb491ff129256a520e43b210d364732646a26e0e5519b778360bd33be8892fd6c03eaa74ac6b
- SSDEEP 768:+kK60f5ksBejVX47kqfNZKduegc2Ip4nTxf1mlIJ6lenHMZ:X+usB8VX47kqfNZKd3S9NfIk6+M
- TLSH
  T100137D869B284083D653D670D282DE47F975F7A29B22C7CF51A5838D0E273C1AB3D35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  imageformats/qtiff.dll
- Size 434KB
- SHA256 692be97877d0b987e65317de2237f9a6deda7da07ddea750114ddab7af602a21
- MD5 3ddd03ec6125dd6946be8abc1f9a3c95
- SHA1 e6a3c54331e6d61ac9d2c948eb3c03f8b1ff5b59
- SHA512 05bda0105f334659cf275def982a91d98eb4e9288878d711aef270d6d0c18e88b43dbdfc3f6ad82a0b9fe7609de93ed9048f35a6e676a3856eaf407e00a461d9
- SSDEEP 6144:m7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhk:I69ZYmmGq/Q3DbnzHk
- TLSH
  T12C94B505DED049ABD872813456E7C652F273F4853B12CB8B9698B1353F127D026AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  imageformats/qwbmp.dll
- Size 39KB
- SHA256 f19e3889e5676d179ee30c3507678b3562f4ccbcce25fd2b30bd94e2b152c0b0
- MD5 d0770da01ba9294e91907cb68288fe35
- SHA1 bc2525a10db502729ecc74a6e46dc6ae5425e0c8
- SHA512 d0fdc688b586f9c1eaa0dfd510f97724c64f9796ca5c9983ccd62c430ad34e57e9be5d97b95ce3d9b150d0d9998efb09e7425a121766fac5aaab2b2d81deed07
- SSDEEP 768:UaVooyFmtxWX2xyjnl2OYomrduegc2Ip4qMJTxf1mlIJdlenf2:7LyExWX2xyjnl2OYomrd3S9R7fIkd1
- TLSH
  T10F035BA69B6D8182E613DB70C186CE53E975F7A34B52C7CF11B2828E0D273C1AF38255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  imageformats/qwebp.dll
- Size 552KB
- SHA256 6b3fc96932d1054d3d56226d35a45b14b35ea0ae2084eedc7c01cb65ab6a2aab
- MD5 4594c421754600eb7672914ec16718bc
- SHA1 b7bf77f4dd25b2a8a233c69ab90c07aa5b571df6
- SHA512 7f99594ab0730260aad3ef0b4aab45b0593a71427a8d740d2a589f3dace824d526f168437bae7bc1fb0e3ddba48747823c8698a0881fff7368e0de847c6beb69
- SSDEEP 12288:8WhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518sg:8WhBPLrLrLrLWCYNVhA6Z9mun518sg
- TLSH
  T1BBC47C8ED99623D8D49BC4B88AFD965BF6A43C1D434095EB17D0B9293A33BC05737B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  jars/JavaCheck.jar
- Size 1KB
- SHA256 cc732ab7504afc2c01ddb28e3f5da38dc96a707f3acccbd9ea022e7747fb5bb7
- MD5 4a08d7813a7d4c8fa3fe7d39556ff6a5
- SHA1 6a03a8fd64f9ea948926877b6aa77ba029893121
- SHA512 7fe87e5ddc6c0e2f62cb3115e954b3544170afb35bce40a651fb63802c63b7f03669792200cfdae24c8a0dce5ba2805fa1b5064a8dbae7155489eb0e6be7b1bb
- TLSH
  T1602120457FD8C062F71B94BBD650B253853F2120955DD10307C82A544C24BC85A238CA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral28
- Target
  jars/NewLaunch.jar
- Size 13KB
- SHA256 ad9eed5899ab84530d4e2a5bd71cc64abdd67d3c081c3b58f52bcd143b0fcd6b
- MD5 734473a6e4bfeebbf51029336885caf3
- SHA1 40a1f025eedaa0a65aaaab433524ffb7a9e01761
- SHA512 55d6d5efe18c514cf18d84b94d657b863cfc91517ae047dc2ffeb370827f57c8e475a976a77fef453fb81c5371b21383214f1725a24dca8aef753b9319ba54c1
- SSDEEP 384:DUtvof8bfWN0TUaqdiW1C5Eq4pBMYYCmOWz:gtwfcWCTOsENr/7Wz
- TLSH
  T17C527C15AB97C8A4F413877481C587AB7CA57680A0F2B1321FB69695482CEDC5E8BF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  jars/NewLaunchLegacy.jar
- Size 23KB
- SHA256 a1841f4b859113d870d7a9234934cd89bc9a8f0886b68216b9dc392af23a595b
- MD5 a9484e7375b70d038bbe50db58ba62b0
- SHA1 a4d4d3b94167a36794d7ea0661709232babc23e1
- SHA512 18d6d8f1fe7697bd7c55e1330bcfc0829c59731e6ea6148c4eea2101d7b2a5372b2437a9f26b0cea767b5b5bb948b2331bc76eb7f1866aa90473bcf95e84cbc0
- SSDEEP 384:iwIRidu8LAkHUwnFdSoKD4aR0K1Yp0oSUP7mMM+KOy/2lQuBgG:/IRSu8LAk0wFdS34+Kp0ormMFKOy/2lV
- TLSH
  T116B29E27B786C891E917863AC94FC71B1E95200CC0BCB466AC790BB51C9CDEE2B075E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  liblzma.dll
- Size 199KB
- SHA256 56840943bcd48d9e7960f1495dfce153bdce10f0f3e25b95c7d82c662dfe5723
- MD5 8eb454bb23b9356c2453703f5ff68be5
- SHA1 3fbbdeaacd852ab9786dc9202c095989498a95df
- SHA512 0944600b8733bb0b97a53eb5aba6e018cbb85c51b2d7fb7a056882c2947319f987ff3def92ce21b8c67629ac2e880abb3af5d91e19386121828df06644617a9e
- SSDEEP 3072:Q9w3e7cqOlgA0xUaotDWg+/rXaHaA1HRg7GWUs9mNo+sowfXisTS:Q9wuf45dsgka1HudYO+3wf7S
- TLSH
  T15D1439A562A5F0D2E2678C34C6678B17E7F678040310A6EF05DC93BD262FBE4563A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  lz4.dll
- Size 138KB
- SHA256 3bc341550859d446aeb213b53af4f1107583c2ca11201172088a2062ab3d6a0d
- MD5 9d1a0f650d348ab1fdc66cc23df5c48e
- SHA1 949c8ec502842f3d84e9f1fc5a38c6fc86ee7133
- SHA512 fcdbd7a9e07a2867812a6f5b8c6362f6bd6ede7e07fc16ee34bb3f4546c6cbcf68b6e55c57e20418822e54ad6963f8b6103524bc77a3286aaf6f75543a51c905
- SSDEEP 3072:Xs8r+jQPM8eFnR6bWuzTy0A58gY1glRr5d:Xr+j78eFnUbnTy78S/n
- TLSH
  T180D37C87F7A4109DE153D0BA96D6864BF674B9522311AFE743E8CE712E13E908E33352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies file permissions

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32