801bd7f2ec70cdf68ed5c9ab90655856e166b873b1ce56c7170a94da484665e4

Analysis

max time kernel
150s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Primordial Client Launcher-1.0.4-win64.exe
Size 2.5MB
Sample260817-phcspszcra
SHA256 801bd7f2ec70cdf68ed5c9ab90655856e166b873b1ce56c7170a94da484665e4
MD5 f4342a3e23f609a8da3a8f622d4c4f0a
SHA1 cc36377e43c72cef738d41fe479628f4805ef481
SHA512 f5e9834059aa73891cb24504dc554a0281f8a69f01ee90f7e597980402592f1a63111578d193c2b7de9ed5703f853ebf991655fd3efcca7be94b620841011127
SSDEEP 49152:IQ1W+rGPnwgjLl2bS5QNh1DFlTmotB4Snfe6Aw7nC31kHm:Imryn7xnChZqobftAwzC4m
TLSH
T1C5C53349F78CCD0AEA820130AF95DB579533F5F208F09BA3BA04160BBE27F54A965375
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
5180	Primordial Client Launcher-1.0.4-win64.exe
5180	Primordial Client Launcher-1.0.4-win64.exe
5180	Primordial Client Launcher-1.0.4-win64.exe
5180	Primordial Client Launcher-1.0.4-win64.exe
5180	Primordial Client Launcher-1.0.4-win64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Primordial Client Launcher-1.0.4-win64.exe

C:\Users\Admin\AppData\Local\Temp\Primordial Client Launcher-1.0.4-win64.exe
"C:\Users\Admin\AppData\Local\Temp\Primordial Client Launcher-1.0.4-win64.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa1E8B.tmp\InstallOptions.dll
Size 15KB
SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
MD5 7854290f8bc473fb9fad1917b0065731
SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
TLSH
T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa1E8B.tmp\StartMenu.dll
Size 7KB
SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
MD5 9ba64ba25b26b3964fe1ca1d331387ee
SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
TLSH
T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa1E8B.tmp\UserInfo.dll
Size 4KB
SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
MD5 a189f9b1c9ef05e23e5aed0bdb2a1bf4
SHA1 584e9461cbb901aecabe61b4c3fbed146da0035f
SHA512 d9f34ea10b8174c031b25dace65f092dacd0e582e3b8cf1779ca9721f50a896cdd3be2cb6738a7ae487a3f8dc1b4548045ac6ca875138003903b0e6e055412ee
TLSH
T1EE8173BB92E00CF3D0A44BB740A71CE362B5DD201756001F4A478AA92590B67EE7E715
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsa1E8B.tmp\ioSpecial.ini
Size 1KB
SHA256 f4d91229073402684ff997e39e55cd157b05e2998445f119a8088615c16f3a4a
MD5 82730f61136436efe947efd2a04f34da
SHA1 2668c73c42d8ed5d07d1278c882d9ad265b46ed3
SHA512 924c8aeabacc34a30ef6343c6717389c0289594c113de8b3b3380c10a3ce3fa25b2c03b9c06e0da976a58fee6f65414de55ffae0466fd999022cf1d785dca0d6
TLSH
T1B031AB137BFD1108F2FBBB54FEB540748B3A7C56A838C50E51D00A0E09F6A408963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads