801bd7f2ec70cdf68ed5c9ab90655856e166b873b1ce56c7170a94da484665e4

General

Target
Primordial Client Launcher-1.0.4-win64.exe
Size 2.5MB
Sample260818-2rbcfstwfw
SHA256 801bd7f2ec70cdf68ed5c9ab90655856e166b873b1ce56c7170a94da484665e4
MD5 f4342a3e23f609a8da3a8f622d4c4f0a
SHA1 cc36377e43c72cef738d41fe479628f4805ef481
SHA512 f5e9834059aa73891cb24504dc554a0281f8a69f01ee90f7e597980402592f1a63111578d193c2b7de9ed5703f853ebf991655fd3efcca7be94b620841011127
SSDEEP 49152:IQ1W+rGPnwgjLl2bS5QNh1DFlTmotB4Snfe6Aw7nC31kHm:Imryn7xnChZqobftAwzC4m
TLSH
T1C5C53349F78CCD0AEA820130AF95DB579533F5F208F09BA3BA04160BBE27F54A965375
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Primordial Client Launcher-1.0.4-win64.exe
- Size 2.5MB
- SHA256 801bd7f2ec70cdf68ed5c9ab90655856e166b873b1ce56c7170a94da484665e4
- MD5 f4342a3e23f609a8da3a8f622d4c4f0a
- SHA1 cc36377e43c72cef738d41fe479628f4805ef481
- SHA512 f5e9834059aa73891cb24504dc554a0281f8a69f01ee90f7e597980402592f1a63111578d193c2b7de9ed5703f853ebf991655fd3efcca7be94b620841011127
- SSDEEP 49152:IQ1W+rGPnwgjLl2bS5QNh1DFlTmotB4Snfe6Aw7nC31kHm:Imryn7xnChZqobftAwzC4m
- TLSH
  T1C5C53349F78CCD0AEA820130AF95DB579533F5F208F09BA3BA04160BBE27F54A965375
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
- MD5 7854290f8bc473fb9fad1917b0065731
- SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
- SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
- SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
- MD5 9ba64ba25b26b3964fe1ca1d331387ee
- SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
- SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
- SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
- TLSH
  T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
- MD5 a189f9b1c9ef05e23e5aed0bdb2a1bf4
- SHA1 584e9461cbb901aecabe61b4c3fbed146da0035f
- SHA512 d9f34ea10b8174c031b25dace65f092dacd0e582e3b8cf1779ca9721f50a896cdd3be2cb6738a7ae487a3f8dc1b4548045ac6ca875138003903b0e6e055412ee
- TLSH
  T1EE8173BB92E00CF3D0A44BB740A71CE362B5DD201756001F4A478AA92590B67EE7E715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  PrimordialClientLauncher.exe
- Size 5.7MB
- SHA256 449e0fab376dafefc13fef44cbecf6c1d8483de0931c1ac02b1f2ebe99bb4353
- MD5 d4420451fb09cb66bf48b243eeacdad5
- SHA1 75e2b8dfb031b7806aac92a0f11120e8de9ca26c
- SHA512 a26bcb0164014e52028f21bed48f47d943de2d69b191ae48cfc75706514a7221f88166c11f897876c81ba94f6775baf388c0d65910a546099cc29cccbf8f2594
- SSDEEP 49152:YaKlz0ErrgicXliSzVYTKO/gP80xBVt4gmonzHUcUE4aWTYLWWwBjOPAanY3PMC4:cQlDzVHVqjAH5HrJmqqJhJgQQafyi
- TLSH
  T15A569C2172D190D4E01BE1B91D676846B1B3388A073166CBF684995AAF7B5F10EFB3C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6