6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
Size 22.8MB
Sample260817-lrlkeshj41
SHA256 6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4
MD5 5c9f6836c0720e829adf3ecda42ebf86
SHA1 f9e9dc31850d1a83c49052d06f29382dada7ba30
SHA512 ed79f9057113468d44d7f346c0611c98a5abaffe0b4ad49c21decbb64703bac12a1c7fdef4430415dcb082bcaa94360f7dc58b2616b2853569f3e65d401b5f1f
SSDEEP 393216:bI1ufAq/F1Ru20THfW7HiQydLaXWJg21N3RY3D3v00EoUiHEjlSIwKbnaEsw9Uwy:bI1un/k28OG7LwCdhso0NPYl8EswOdLL
TLSH
T1D13723CE67744004D18E0F3497AA91D0391E6D6717F0E87BEA27F0D9ADB5ACA46CE90C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
- Size 22.8MB
- SHA256 6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4
- MD5 5c9f6836c0720e829adf3ecda42ebf86
- SHA1 f9e9dc31850d1a83c49052d06f29382dada7ba30
- SHA512 ed79f9057113468d44d7f346c0611c98a5abaffe0b4ad49c21decbb64703bac12a1c7fdef4430415dcb082bcaa94360f7dc58b2616b2853569f3e65d401b5f1f
- SSDEEP 393216:bI1ufAq/F1Ru20THfW7HiQydLaXWJg21N3RY3D3v00EoUiHEjlSIwKbnaEsw9Uwy:bI1un/k28OG7LwCdhso0NPYl8EswOdLL
- TLSH
  T1D13723CE67744004D18E0F3497AA91D0391E6D6717F0E87BEA27F0D9ADB5ACA46CE90C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery ransomware
behavioral1
- Target
  archive.dll
- Size 731KB
- SHA256 812e646111face02ae8492d39582bce216845568513b72ada52cb2c4ca0b3f40
- MD5 bf0da6061ed80e963c5e421ab45c1aed
- SHA1 9a6f15040ea74b5dd54556ed10d2f234fde09b6b
- SHA512 75e98f4e9ed033a869ad8d47f826d069fe5a6e76d6d8ef5794428fadbd597e75786d7ddb982482ee1e0f36e103d860dc26a01a6943198bafabcf1c1b72759704
- SSDEEP 12288:WMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCctzicsSW:zSFVwT75qEtXm8KgQNjVTNjzxwjn1rW
- TLSH
  T124F48D82BBF40669E977C1348546AA27F3F1F0551760DBDF06A483653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  bz2.dll
- Size 90KB
- SHA256 39a7d40a7dcf21fc6b09352907465e941a1a6799aa28f6c0d7875785d33e12e2
- MD5 7a8d80c62e502073fd89e8fc49a90bb1
- SHA1 2326d435cb57f5c268b3b6de11c32c6d5da20d38
- SHA512 1a35ca43d494a68e75be9ede182db4a5b62bc79abe37f0a6cbe011c8cc00d9440cc1f6cfbd5b706b69935f4560fed7be2dc987b7e2ea469c4975b6ddc1f59be0
- SSDEEP 1536:jBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLe8+ti8ynX1f9P7fIkdECm:JuxAUhbrYVLe8GVysdCm
- TLSH
  T11B936C4476A2BBBDDE9BC43896620747FF34BE690B1017BF3560D2BA2B12BD10E74116
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  cmark.dll
- Size 155KB
- SHA256 85618e723dc422d863765a427c8fb905d2b26aa3f8f7ad6bdf21441dc488c973
- MD5 78c54ea86d22d4ae6f8b894b5dbc7520
- SHA1 a5828ab5155912b41049edcca221d404ec7b57f9
- SHA512 70d8ff955b24568812791d70f3de34cf1d203e2f11490e444bb1f2a89efb9316dd11c42c75bac113190ff0f1e6d34da6bc6b61ea64c9b22ee2c9989630eb4917
- SSDEEP 3072:M5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIit+jO:YWcBSGsvVlFVtaOmROEit+i
- TLSH
  T17CF35B86E5BC0066CD1BE07C4D6EE986E3BAF2173310C2E716404E65B9E7BE27635352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  iconengines/qsvgicon.dll
- Size 73KB
- SHA256 0364cd20e00a02d80722b4e5ea36f3f0e3df8b2a868720083c87765ba4738af0
- MD5 41b48654eb151de9f11b09c1b87b464c
- SHA1 2743c6ab9cec6d3ca00d817ca2d9070a9af526e9
- SHA512 254e9534690b35cad544cc9089dc874d8579d0fe17e03af3ab7aa492d82742af5bc67de973512b89cd962bc45184d544c506f33f40d8ba7ff382d6d34627e050
- SSDEEP 1536:6AaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbfX1f9gfIkpECNk:Fa6jmZh9poUhDu2o5bB+imfbBlCi
- TLSH
  T11C738D4727A81049DC6BC23DC367CA07FE76B6566761EBDF12A1C4222E63BC05B78361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  icuuc.dll
- Size 51KB
- SHA256 09b775cae86f5dd0d10335c6dd8028f1bdebab800ad46e4d748407b3534a3651
- MD5 df98a8553629f3b508d6a0012b8ff7bc
- SHA1 7efccba0528cc77d70885614efde169fe696a94a
- SHA512 a8bc3099020be8196d7caf7d58de612aa53a6f53b770c18bc29ccfdb8f7f73bcc8d17ceccc6a0dbf8bd5b64d47d72474fab14b35411d3eddac1b2ef87b70aeb0
- SSDEEP 768:9CFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mrsEhEEh8wxu2IL:U/prGPh7tm8T9Z9X1f9DfILU/S
- TLSH
  T1D5330A8DC8184F52D393EE3EA5B8B92F2D314AC6BE68FB78ADB4C59005D538D2274351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  imageformats/qgif.dll
- Size 50KB
- SHA256 35a334aad6e7b4414a1663930a62d951fead4026eea47a822731fd70bfdf165c
- MD5 f6c73cdaeb14e7463272f9f034985069
- SHA1 cdadf30393f0f250bd7f69d5c8cbb0921fe4bb93
- SHA512 99355a00182e86c6914e88bb7d412b5a8b149060b185167fba2ed654b115c601f050cd6ee42cd01b48b67c64e3a9ae69c2a78ee8687caf56c73bfd3ab8f4846f
- SSDEEP 1536:GOTVMkw3j3fDpP2pcsEX7cnW/X1f9pfIkQEC9:GOTs3fD9mcsEX7cnWiaC9
- TLSH
  T1DB337DCAAB6440D6D5938230C696CE4BFAB9B7524B51CBEF4122C25D0E237C17F38769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  imageformats/qicns.dll
- Size 58KB
- SHA256 af6dbfee7b4620fa0fd19d05ea4b0ce06f264d3881a5c2604de690fa4f7d7f90
- MD5 ef9396b71f5d46d076ecc430b33481e2
- SHA1 80039d4d0096ea4f2c59156b921d0aada920aa78
- SHA512 5c78a434146fb45ee9090daa914742e0c8996e1fef372354c3306ca822d8d4004d39d7b02421af32b0c7db43c37128e400c3290d3e7ec69c700c9937544d3aed
- SSDEEP 1536:Evy2+up1dsYzCqj7JkO4eX6sOSVBpTJfX1f9pfIbHtvlU:SN+uGYzn7JosOSVBLCTU
- TLSH
  T1C4438D4BA7958282E557CAB4C24ACA67E732F5435B928BDF0061C52D1E233E1BF3D394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  imageformats/qico.dll
- Size 48KB
- SHA256 7090af10ba907e7c6540ded1eb1b5d0f01dd560cc4018ab451915f9323ec32f3
- MD5 bdba9795466d32770c18a4969e94d270
- SHA1 91a229bbbfca690d7fd6c814a633bf0fd5e63395
- SHA512 e83fab3d2f6d6ea900248110b76a3fb07e9403ee9606ce2938b844a121ed14cd8c823f7bdf28a5f65eb17867fe8601c5077831bbd11ee593116e6acf7bd749d1
- SSDEEP 1536:gBUjz9OIP5duPvHeTLXwWiX1f9jVfIbHbvlQ:LjEIKPvHeTLAWw2TG
- TLSH
  T184236CDA96390086E963D678C696CE63F9B9F3925B52C7DF1162820A0D337C1BF38354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  imageformats/qjpeg.dll
- Size 567KB
- SHA256 7e9674ea5355e96d4db5c22bbc367d5fd84e590c00ae9209310c07f7532004ce
- MD5 1f6045d47b182883b729116e0d3207fd
- SHA1 d7b3dec9d3e999c5ad70c0f17852834cf7f3df54
- SHA512 5c7420db716853b51f309216bfd369b179f42dfb09dae1751261bdfac02ef93469fdfa03083bb45351d617839450f48a62678967ac2a9d06c4976afc9a36eaec
- SSDEEP 6144:bg2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbS:KfrS9ECMrem
- TLSH
  T129C42942F6B51841C7A68838DE5AC966EB91781D03F58AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  imageformats/qsvg.dll
- Size 41KB
- SHA256 3b867a449efb27a2df9f14286d74c895392f13865e7af55e39550d48547dc4f5
- MD5 524b7e20ccfdc2d7bd8b8e200dc0873d
- SHA1 5fdd6be4e2e0a32cae5527a7d5b0277c76f15bdc
- SHA512 92b3010aa64c1b14921e0b33e419fff7a894fd478037b907fae99cbdec98422645b5906b9c7bad0e1dba7f9e1fe665bd2f38a8e98f189130a763ccb994207bb6
- SSDEEP 768:OSi7nr/w0rAkuV2O4L5blG7uK5gSWEhEEh8wxu2Ip42U5Txf1ml6Z+7EqNgU:Orr/w2AkuV2O4L5blG7uK5nXX1f92ULq
- TLSH
  T161134A8B9A690487E523D670C58ACE07F83AF7824B529BCF616752590D633C1BF3C396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  imageformats/qtga.dll
- Size 40KB
- SHA256 68d3514f6843b349a07d72ebb01f8f6cd8894efb9f6d3d3f7db2549a002e7ca6
- MD5 59cdb8e962592e528e7fe67ae109fdf6
- SHA1 0b32326f4db2191ebf661e898b3fe196f377c30c
- SHA512 637c2ace8262e15ba15ff83fc725ec7916d321a2d16ba160d8321eb1d36d44ee382ba6144f6ef361d1a9f23762eb0eb7fa355975350c2b339d674198abcb20e0
- SSDEEP 768:pkK60f5ksBejVX47kqfNZ1EhEEh8wxu2Ip4afeTxf1ml9dH3jLls:C+usB8VX47kqfNZ6X1f9U+fIbH3vls
- TLSH
  T1E8137D8A9B244482D517D670D282DE43F935F3529B62D7CF60A6838D0E277C1BB3D366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  imageformats/qtiff.dll
- Size 434KB
- SHA256 e0d37ba43fed59c34e786939afd8d98ef6f77611c1ab03c0ad9b7abeefb288d8
- MD5 4d21102a69f385335c28f7306eb13df8
- SHA1 397ca0541c5bfb696893e220db3318cf49fdf354
- SHA512 02d179cb695ad210a429dea02f55cc4dc70be675223258b91f24316d6a3c1014e9e1516717c0de6d486bb1bcd20d904dbc6f73cecc292c438e90e6b851b2309f
- SSDEEP 6144:X7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhY:P69ZYmmGq/Q3Dbnz8/
- TLSH
  T16194A505DED049ABD872813956E7C612F273F4853B12CB8B9698B1353F127D025AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  imageformats/qwbmp.dll
- Size 39KB
- SHA256 512d390c159f7a37efdc1e43b08db2a493ab9d6e7577c8d7dcb3972526496e2b
- MD5 d4806bbcaef2d633b44a04ac11c39930
- SHA1 7644fe78d6f11eec3ae8a10c91780ca42f45431b
- SHA512 43894d3570bf1ac3227fc4de310bd15b057af8c7d2b04bf37f7100d016635a9bdfb434fafa716ca2b6f381372a0a4e5390b61253292afa21462bc9228b953dac
- SSDEEP 768:5aVooyFmtxWX2xyjnl2OYomUEhEEh8wxu2Ip4/jTxf1ml6Z+7EHNgb+:ALyExWX2xyjnl2OYomVX1f9/hfILIg+
- TLSH
  T1D5036CAA9A694482F913DA74D2D6DE13E935F7924B52C7CF1176824E0D233C0BF38395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  imageformats/qwebp.dll
- Size 552KB
- SHA256 7c3e0e414d07e234f63459c627d3d0ba95f128b9289621e9576810c011f199b3
- MD5 67b00cbfc8e71c177b9b15afc60d0455
- SHA1 3821e42ad469586af5c1428babed8baf1310001a
- SHA512 e0e8b603f5809dbd3c0757c339d9e1c189dfeb2e2d771c7821709374464061f56077bb01505cfe84cbc5d22f9061a1c32962969cf99229132cacf64554962414
- SSDEEP 12288:vWhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518so:vWhBPLrLrLrLWCYNVhA6Z9mun518so
- TLSH
  T123C47C8ED99623D8D49BC4B88AFD965BF6A43C1D434095EB17D0B9293A33BC05737B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  jars/JavaCheck.jar
- Size 1KB
- SHA256 9a3ce879970517ed86f649360ea530dc14f4006b695c0935f98e10aa4be09803
- MD5 90ccfb92d70142be9ddba5505d9621a4
- SHA1 e6a58be1f39e3bdec88bf047436a23d640dc2915
- SHA512 19a8f658f4e535734f79d1b41f89cc88659a5b7a1eacc102b384c58b1aba4fdd389968e2e85e0a4ad3ad3e8549ca9ac901884ead94f839181fae5d6d51accb9d
- TLSH
  T10D2142667FD4C073F31B18BBE600B663852F0220954C821307E47E944C34B885D23CCE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  jars/NewLaunch.jar
- Size 13KB
- SHA256 5086c5086c78bc74dad6c7fe0e20fe904cfce6d9a67c63fce80f7907ca731eb6
- MD5 73a61d73e903e38c0d120c2cf19156a2
- SHA1 f425ce8b686d297ba61904b271a577b4ef31cc9c
- SHA512 f560dc5d68feaa68823cde516c84cbfe846dc087874d4e62d492336ea72669eb07dd8d905c5faea0ca23f5992b65d0cca0073a8ed7791399e1922f4d0924823f
- SSDEEP 384:QUJnof8bfW90XUaqNiW1e5Eq4pBMAYCmmSP:VJofcWy3+gENrD7+P
- TLSH
  T195526C16FED3C865F593837442D58FBB7C116684A0F162331BB26E95581CEDC5E03B88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  jars/NewLaunchLegacy.jar
- Size 23KB
- SHA256 e9429eadcfce33c20a9509ea18c155430c5d8f9c8e9007b125df2a05fbde7a9b
- MD5 e7ad7e3728604bc3e24df38e3945fceb
- SHA1 a2bc4a45aaed6856c3f9681d9e3ff55b103f5dfd
- SHA512 ff9a6239dc15c4c3ac5bb10739680690b6addbe22da2f32e0690027a53df221b238d7407b527b188483c325d6286546f6cbf66db8bf37c6b88598811061debdc
- SSDEEP 384:fwIRiZu4LAkHownFdSoKkIaB0e1Yp0kSULKmMM+KOy/llPups6:oIR+u4LAkIwFdSIIGKp0kWmMFKOy/llG
- TLSH
  T137B29E37B795C891E617473AE94ED73B1D810008C07C64B6ACB51FB51C9CEAE2B036AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  liblzma.dll
- Size 199KB
- SHA256 1f423fcdc9108b8878156ed27109fbdb17b7b90b758935ef308516f42157fbb2
- MD5 bc11b63b4e84f7175da645b3529d24b9
- SHA1 50cf46b1e1a762d8fd28ac6d1f0ca322d6531a92
- SHA512 fd3e02b12c944e12d5e979273e33dfb939106c13038ef2d604a416d3b3db6d0e0406ea5557518b1373ee69c2ef677f0c262fd4f2adb9b76522123a5f530773fc
- SSDEEP 3072:P9w3e7cqOlgA0xUaotDWg+/rXaHaA1HRg7GWUs9mNoP3sowfXiedGChg:P9wuf45dsgka1HudYO/3wfng
- TLSH
  T1AB14399562A5F0D2E2678C34C6678B17E7F678040310A6EF05EC93BD262FBE4563A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  lz4.dll
- Size 138KB
- SHA256 91fbd4bd121e1cef7191997ae9cb0027746b3b19641d630f332c1b8df9f5d382
- MD5 e8baa675b3b3965716f0a3d675fe6063
- SHA1 ce841b1e419a4debc0bbc47eba89f77e85b9f52c
- SHA512 d9e589bc76368a7f6f06e7921792c7c8cdc66a118ee7918c166909c1d569aba321da150ab2bdcfb9d360071d4b7589c9ddd3b7a3fd780a34c08070a3a6b7ec44
- SSDEEP 3072:es8r+jQPM8eFnR6bWuzTy0A58/Y1glRrNa:er+j78eFnUbnTy78j/w
- TLSH
  T1DAD37C87F7A4109DE153D0BA96D7964BF674B95623019FE742A8CE712E13EC08E33362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  lzo2.dll
- Size 127KB
- SHA256 14df059d4d9a3199aa884d99d968c34109934fcfb53c1accfa1bf0387b4f8dc2
- MD5 f3b52a2e8a10511187c2a2434e8da3fd
- SHA1 470856a993833f87df8464028fb0fdcdfd906f6a
- SHA512 3fc9b633c8ae71a95c359bf95dd040d7c7e91e405818702215b12ef2d1031292fe1f04dd2953586344f38c702d9d493a5dc18b17616e71ef8100cbe06b40168a
- SSDEEP 3072:bsSxM+h7JWygE0lE6OEb/Ex0JgxiLxKkv8w1GxOSC8:f7MdEiE/ELES2xiLxKkvbGgq
- TLSH
  T15DD38E5AF1C65068DCE7C2388A9AD2C6F675B4480310ABEF16D1E97A2F43FC58E35324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  platforms/qwindows.dll
- Size 977KB
- SHA256 88cca63b1e47f436f67e7a17419ff956007fabd12b71310e81f0c7b95945e6b3
- MD5 2c614cd8183eae586da9dd2080cff49d
- SHA1 508adfad41b18c18e2b7a29834650d8154a62086
- SHA512 1ab9393d3d860d296ec52fbb9747fef78593216f8f5b1eeeadc967ce5112a83cdb3cb22b556c08987f7e08f26b5c2cff49d39e27b29baa66f3589ece287162d8
- SSDEEP 12288:GEhqYCXtrx8ASfukqEZ8l4382P3Q464RSQivRYtF3:GEh5aOXfukqNl43Nh64z8e
- TLSH
  T11C256C1F63A80255E83AC17ECE6B8713D6B2745903A186DB0161CE197F337E32A3DB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  prismlauncher.exe
- Size 9.2MB
- SHA256 c24c7c84fce7ff1d12c709e0bcc8993aaa2a8cb662381c960ccb7d93c88bc2e3
- MD5 ba97d01c7a0a9e46a6e87d29fe0ba31e
- SHA1 e80c3cc157df9c2105b194aefcd06ea3c4572ca3
- SHA512 6f956ab5c211eba7df5dac20ef55db532b1f307a8e53fc56078af47338cb0f1e5c931fa8ef2d2dfca669caff191e5db4c6c0a89a69f1962e38c1030e74cb61c8
- SSDEEP 49152:7VlXEGLk78+CMXvOKdZgyf70RaXA0jg/e/vJLiZcfzZpQloJLKZf9E0g0YLK8uYQ:VTd6Wmb9YOHSc6cn+HPiFkls3/9Zo
- TLSH
  T15DA69E5FA3A841E0D179C278DB4A1943E1767823432099EB711DEEA65F335E23E7DB08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  prismlauncher_filelink.exe
- Size 107KB
- SHA256 d3e37067e0f1179e1af4ccff5612c0a14db93657de9eb9bacfa16f742c0a06df
- MD5 761727470e15e4dcc0c74a2e7b2a822d
- SHA1 ae675471af2c1c64ad348069a3fcc789be74645f
- SHA512 5fd0f013d49518921551a16bd984b5c1ce002488ea60d2b20922033ddb6ad4a45874bb2b47c8a037f8437bf96da682dcfb8de24b47acb7e7e6dea73ba1721b27
- SSDEEP 1536:SUn22dqp5fZAaO1pcNxg3IC5oCKFWeo2ABoM654dErV022AykpQoX1f9p7fILdg:op5S11pqg3ICqfC1LSwELhuccO
- TLSH
  T15BB35BBF7A2C00E9F166D179C7DA9652E337709847208BFF035186A60E237D99E3DA05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  prismlauncher_updater.exe
- Size 411KB
- SHA256 ecf39885093d75d2ec811625329af7b5aa79ca41d62cb74717e26e9384443108
- MD5 c6306a1ea5ed1c5cf7433b81102ecb59
- SHA1 bbcd1b62b79e4e2441a3ab2e5ac92b87db9a1ea7
- SHA512 c836e806abb351cb6809a4d9b33d7e84f4742e9a7dc92246f64a6a46cc5963deb492c46c73cf76edbcadb815c1a18d84c6ed6100271681e5998a4160706cad0b
- SSDEEP 6144:/bAfKHfYY6OlA1hU4kxRKIIR1csNWo5eXjZrr2GiNIfxXamEykyu3X60WvUb8Hk8:/bAfKB6OlpGF5ex2jMkzXc/l
- TLSH
  T11994392EFA5501E5F925D17CC7ABCA12D17770DE43A1E6EB032D8D261E272E87D38A04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  qrencode.dll
- Size 62KB
- SHA256 3d7ad6fa71b1f258ccf3095a757846d7100370d694de19a4b88b626c153d75b4
- MD5 903aa3e4b252fa29696485b2371df310
- SHA1 8dbe12396f86b83e57be6a689d56bfe55877f09b
- SHA512 da3ba4153f94226e3faafa139977bb29259d7fd6218b711c94c949ada52fd37d4339cda3e6aa38c2e9c86fae15f020ebe9849013ad96d41eba6edc1f539150d6
- SSDEEP 1536:wWnJZv7gLP3iPTLSvnSRX1f9hfIkRECmq5:bnLvsr3LvnS8NCmq5
- TLSH
  T134537ECA7A580189E5578534C2D7DA87F57076931B419BCF1790E79A0B33BC2A73A31C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  styles/qmodernwindowsstyle.dll
- Size 219KB
- SHA256 7f4d85292ddf87e8af54a9b9f51eb040b3682ab2365d20d771dd7d8206e990cd
- MD5 6b87ff983347252eec71ea25834d75ef
- SHA1 5f025204714f1cd6d2311f7d94f62707145793e4
- SHA512 af38a45034856fcb0cd3c08fe09b6707f8110aa5dad42947f95e945ddbadb935630d2a56aaf2e186451556e24ecd337025d8ad0b62f23c038bf997612293d7f5
- SSDEEP 6144:94vKeYVVMifp1yq9uT/ocMIhw5oL5bQ/Z/P9tlJaH9TpII:94vSVOihU
- TLSH
  T152243943329612C6C967D2B8C90B5613F97370A8032696FF4167DEB41F633E2BD39661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  tls/qcertonlybackend.dll
- Size 104KB
- SHA256 46db96992c3100450906f35f21a3a8e1772cff67e6d7de494cf5b1fbb3337410
- MD5 50c27ef272b81e989a6be475a65b1fc8
- SHA1 5e735a8a9a1cf26850b12f5c2e60390b5adb8ff4
- SHA512 5627b75cf5a4d6215614dea5265e9c52b4ab521347c84219d65474360040a0fe6b1434166e00680a8397759e7829d15db073a69af9ab8c10c911101cf265e938
- SSDEEP 1536:SIV2ODzyJnNUC8Qh3ye7zjmydnrWK9uyR47sPZ3ZfAWt1cBF8j1vX1f9LfILsme:SI0q8V8Qh3y4zjbnrwsvSBg1cIR
- TLSH
  T14FA37C47629401C6E96AD278C763CC07D3B9B08A57629BFF41A1DA560F27BF29F3C214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  tls/qschannelbackend.dll
- Size 260KB
- SHA256 2aaf1722a27099661f7bc7c4a727726e7ca04ba3a97729cb920590a7f40844ed
- MD5 2a29cf176295daefd3ef8939dd362b3f
- SHA1 e1dd1f9f9dad9502bce6d3d048c371b85c27e8bb
- SHA512 f1c15771acb8428b29e7e7e4786ce756e76b371cba7419875865286d0d79686bb26788f2d4fac31b62c7a67492caf73b6a94c152d4ea90846d5ad687f73bc723
- SSDEEP 6144:t+VXglMW11bIQIT1eov0AkuVeT9cF07Qnc74CpNZZS:EVXCX19ov0GVVFcUuO
- TLSH
  T12344386722900E95FC6BC078CA5BC807E6B370965362DBEF5221C95A1F63BF2B53D250
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  tomlplusplus-3.dll
- Size 391KB
- SHA256 da56668531fe7e4a5f61738276a1d0db0f332c24ef5e7ccb21ea99c96d96502d
- MD5 aef4511b9d4ca735967942484438d5d2
- SHA1 016d9b99df5b0072bf1da6c0fdb85a6c839ed2fc
- SHA512 a9a1d23630244b013effa8c581872f545b61e0bba627a7b62fc591c54e8bba91381748d9304e4e8d6dd80ba580a5890619925497d23f74bb214c83078946240b
- SSDEEP 6144:K80P99pO6Zds36KshHf2rHDf0oTph0lhSMXlBXBWfUjjdVJ8x:qPHdVQ9Tph0lhSMXl+UJy
- TLSH
  T108849E17FB152076C16AC2BCEAEE4601E7B2BC85874167CF17D995A25F13BC06E3BA04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  zlib1.dll
- Size 103KB
- SHA256 70a21e2388ceed18e2a99933039f1417cfca50f70a00f32c043ec8cb269ff159
- MD5 15845d941b17760edcf5b13d532ba068
- SHA1 259a1d8e6e5a9a4cdb91c727eb566ccb1b81b567
- SHA512 bbcd72cd61575279561fb83fba90d194b213675c8e7355ca39adf9739543fbfc7c0b3a52d584dd5b60b0b79e6ab7ba65b3296787bcdf26cca721ef9d3e08f735
- SSDEEP 1536:dvEyaXGzTqbvqRfSOzhppf/ISUaYuOlqjebaIOcIOZ0dGUL6X1f97fIkGECM:GdXozVhppnURkeboSZ0dGULjkCM
- TLSH
  T180A39D8A6A741292D6F78574D4D28B9ED334B1510BA04BDF5198A3990F23BD02F393FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  zstd.dll
- Size 657KB
- SHA256 564f5dd7ad96a0c75314fca24cfd615b423edcb2780e734dfb72d1cc72f52097
- MD5 09e18395eb674c48fe3c4ff198b38bf7
- SHA1 a827509598ab244b327c8d2390f50f81719293e3
- SHA512 dde1210b432618ea340e12e460f33226487f14dcd8b7592715cfc6f503d6fff14c0c85db1b31aa674f8123c3b7f3f165c8a300982040ebaf9e6af5c4cf61887b
- SSDEEP 12288:ckY/0hUaFMJEOQzB8JGKnBxc1+yOdu5Io6H0LokbE:cb/0hlKnBxc1+yOdO7Lok4
- TLSH
  T19EE49E83F29992EDC13FD579C5564323EBB2380613046AEB83A4EF642F13AE55B35385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32