6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
Size 22.8MB
Sample260819-vr4knsel4t
SHA256 6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4
MD5 5c9f6836c0720e829adf3ecda42ebf86
SHA1 f9e9dc31850d1a83c49052d06f29382dada7ba30
SHA512 ed79f9057113468d44d7f346c0611c98a5abaffe0b4ad49c21decbb64703bac12a1c7fdef4430415dcb082bcaa94360f7dc58b2616b2853569f3e65d401b5f1f
SSDEEP 393216:bI1ufAq/F1Ru20THfW7HiQydLaXWJg21N3RY3D3v00EoUiHEjlSIwKbnaEsw9Uwy:bI1un/k28OG7LwCdhso0NPYl8EswOdLL
TLSH
T1D13723CE67744004D18E0F3497AA91D0391E6D6717F0E87BEA27F0D9ADB5ACA46CE90C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
- Size 22.8MB
- SHA256 6c61bd9fef98c21750b021e0450896749cb25e75b91716bf22423d7ca64c1cb4
- MD5 5c9f6836c0720e829adf3ecda42ebf86
- SHA1 f9e9dc31850d1a83c49052d06f29382dada7ba30
- SHA512 ed79f9057113468d44d7f346c0611c98a5abaffe0b4ad49c21decbb64703bac12a1c7fdef4430415dcb082bcaa94360f7dc58b2616b2853569f3e65d401b5f1f
- SSDEEP 393216:bI1ufAq/F1Ru20THfW7HiQydLaXWJg21N3RY3D3v00EoUiHEjlSIwKbnaEsw9Uwy:bI1un/k28OG7LwCdhso0NPYl8EswOdLL
- TLSH
  T1D13723CE67744004D18E0F3497AA91D0391E6D6717F0E87BEA27F0D9ADB5ACA46CE90C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion discovery ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  archive.dll
- Size 731KB
- SHA256 812e646111face02ae8492d39582bce216845568513b72ada52cb2c4ca0b3f40
- MD5 bf0da6061ed80e963c5e421ab45c1aed
- SHA1 9a6f15040ea74b5dd54556ed10d2f234fde09b6b
- SHA512 75e98f4e9ed033a869ad8d47f826d069fe5a6e76d6d8ef5794428fadbd597e75786d7ddb982482ee1e0f36e103d860dc26a01a6943198bafabcf1c1b72759704
- SSDEEP 12288:WMSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCctzicsSW:zSFVwT75qEtXm8KgQNjVTNjzxwjn1rW
- TLSH
  T124F48D82BBF40669E977C1348546AA27F3F1F0551760DBDF06A483653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  bz2.dll
- Size 90KB
- SHA256 39a7d40a7dcf21fc6b09352907465e941a1a6799aa28f6c0d7875785d33e12e2
- MD5 7a8d80c62e502073fd89e8fc49a90bb1
- SHA1 2326d435cb57f5c268b3b6de11c32c6d5da20d38
- SHA512 1a35ca43d494a68e75be9ede182db4a5b62bc79abe37f0a6cbe011c8cc00d9440cc1f6cfbd5b706b69935f4560fed7be2dc987b7e2ea469c4975b6ddc1f59be0
- SSDEEP 1536:jBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLe8+ti8ynX1f9P7fIkdECm:JuxAUhbrYVLe8GVysdCm
- TLSH
  T11B936C4476A2BBBDDE9BC43896620747FF34BE690B1017BF3560D2BA2B12BD10E74116
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  cmark.dll
- Size 155KB
- SHA256 85618e723dc422d863765a427c8fb905d2b26aa3f8f7ad6bdf21441dc488c973
- MD5 78c54ea86d22d4ae6f8b894b5dbc7520
- SHA1 a5828ab5155912b41049edcca221d404ec7b57f9
- SHA512 70d8ff955b24568812791d70f3de34cf1d203e2f11490e444bb1f2a89efb9316dd11c42c75bac113190ff0f1e6d34da6bc6b61ea64c9b22ee2c9989630eb4917
- SSDEEP 3072:M5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIit+jO:YWcBSGsvVlFVtaOmROEit+i
- TLSH
  T17CF35B86E5BC0066CD1BE07C4D6EE986E3BAF2173310C2E716404E65B9E7BE27635352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  iconengines/qsvgicon.dll
- Size 73KB
- SHA256 0364cd20e00a02d80722b4e5ea36f3f0e3df8b2a868720083c87765ba4738af0
- MD5 41b48654eb151de9f11b09c1b87b464c
- SHA1 2743c6ab9cec6d3ca00d817ca2d9070a9af526e9
- SHA512 254e9534690b35cad544cc9089dc874d8579d0fe17e03af3ab7aa492d82742af5bc67de973512b89cd962bc45184d544c506f33f40d8ba7ff382d6d34627e050
- SSDEEP 1536:6AaLoiOBXBqhM+buOxhBBZgig+poUht5nu2o5bB+imfbfX1f9gfIkpECNk:Fa6jmZh9poUhDu2o5bB+imfbBlCi
- TLSH
  T11C738D4727A81049DC6BC23DC367CA07FE76B6566761EBDF12A1C4222E63BC05B78361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  icuuc.dll
- Size 51KB
- SHA256 09b775cae86f5dd0d10335c6dd8028f1bdebab800ad46e4d748407b3534a3651
- MD5 df98a8553629f3b508d6a0012b8ff7bc
- SHA1 7efccba0528cc77d70885614efde169fe696a94a
- SHA512 a8bc3099020be8196d7caf7d58de612aa53a6f53b770c18bc29ccfdb8f7f73bcc8d17ceccc6a0dbf8bd5b64d47d72474fab14b35411d3eddac1b2ef87b70aeb0
- SSDEEP 768:9CFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mrsEhEEh8wxu2IL:U/prGPh7tm8T9Z9X1f9DfILU/S
- TLSH
  T1D5330A8DC8184F52D393EE3EA5B8B92F2D314AC6BE68FB78ADB4C59005D538D2274351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  imageformats/qgif.dll
- Size 50KB
- SHA256 35a334aad6e7b4414a1663930a62d951fead4026eea47a822731fd70bfdf165c
- MD5 f6c73cdaeb14e7463272f9f034985069
- SHA1 cdadf30393f0f250bd7f69d5c8cbb0921fe4bb93
- SHA512 99355a00182e86c6914e88bb7d412b5a8b149060b185167fba2ed654b115c601f050cd6ee42cd01b48b67c64e3a9ae69c2a78ee8687caf56c73bfd3ab8f4846f
- SSDEEP 1536:GOTVMkw3j3fDpP2pcsEX7cnW/X1f9pfIkQEC9:GOTs3fD9mcsEX7cnWiaC9
- TLSH
  T1DB337DCAAB6440D6D5938230C696CE4BFAB9B7524B51CBEF4122C25D0E237C17F38769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  imageformats/qicns.dll
- Size 58KB
- SHA256 af6dbfee7b4620fa0fd19d05ea4b0ce06f264d3881a5c2604de690fa4f7d7f90
- MD5 ef9396b71f5d46d076ecc430b33481e2
- SHA1 80039d4d0096ea4f2c59156b921d0aada920aa78
- SHA512 5c78a434146fb45ee9090daa914742e0c8996e1fef372354c3306ca822d8d4004d39d7b02421af32b0c7db43c37128e400c3290d3e7ec69c700c9937544d3aed
- SSDEEP 1536:Evy2+up1dsYzCqj7JkO4eX6sOSVBpTJfX1f9pfIbHtvlU:SN+uGYzn7JosOSVBLCTU
- TLSH
  T1C4438D4BA7958282E557CAB4C24ACA67E732F5435B928BDF0061C52D1E233E1BF3D394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  imageformats/qico.dll
- Size 48KB
- SHA256 7090af10ba907e7c6540ded1eb1b5d0f01dd560cc4018ab451915f9323ec32f3
- MD5 bdba9795466d32770c18a4969e94d270
- SHA1 91a229bbbfca690d7fd6c814a633bf0fd5e63395
- SHA512 e83fab3d2f6d6ea900248110b76a3fb07e9403ee9606ce2938b844a121ed14cd8c823f7bdf28a5f65eb17867fe8601c5077831bbd11ee593116e6acf7bd749d1
- SSDEEP 1536:gBUjz9OIP5duPvHeTLXwWiX1f9jVfIbHbvlQ:LjEIKPvHeTLAWw2TG
- TLSH
  T184236CDA96390086E963D678C696CE63F9B9F3925B52C7DF1162820A0D337C1BF38354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  imageformats/qjpeg.dll
- Size 567KB
- SHA256 7e9674ea5355e96d4db5c22bbc367d5fd84e590c00ae9209310c07f7532004ce
- MD5 1f6045d47b182883b729116e0d3207fd
- SHA1 d7b3dec9d3e999c5ad70c0f17852834cf7f3df54
- SHA512 5c7420db716853b51f309216bfd369b179f42dfb09dae1751261bdfac02ef93469fdfa03083bb45351d617839450f48a62678967ac2a9d06c4976afc9a36eaec
- SSDEEP 6144:bg2jrDdfz1PqtHuNRR2qvOpZGd/uyqM2sb5crHABKrS9rCpBkTZjM1UKllZqZvbS:KfrS9ECMrem
- TLSH
  T129C42942F6B51841C7A68838DE5AC966EB91781D03F58AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  imageformats/qsvg.dll
- Size 41KB
- SHA256 3b867a449efb27a2df9f14286d74c895392f13865e7af55e39550d48547dc4f5
- MD5 524b7e20ccfdc2d7bd8b8e200dc0873d
- SHA1 5fdd6be4e2e0a32cae5527a7d5b0277c76f15bdc
- SHA512 92b3010aa64c1b14921e0b33e419fff7a894fd478037b907fae99cbdec98422645b5906b9c7bad0e1dba7f9e1fe665bd2f38a8e98f189130a763ccb994207bb6
- SSDEEP 768:OSi7nr/w0rAkuV2O4L5blG7uK5gSWEhEEh8wxu2Ip42U5Txf1ml6Z+7EqNgU:Orr/w2AkuV2O4L5blG7uK5nXX1f92ULq
- TLSH
  T161134A8B9A690487E523D670C58ACE07F83AF7824B529BCF616752590D633C1BF3C396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  imageformats/qtga.dll
- Size 40KB
- SHA256 68d3514f6843b349a07d72ebb01f8f6cd8894efb9f6d3d3f7db2549a002e7ca6
- MD5 59cdb8e962592e528e7fe67ae109fdf6
- SHA1 0b32326f4db2191ebf661e898b3fe196f377c30c
- SHA512 637c2ace8262e15ba15ff83fc725ec7916d321a2d16ba160d8321eb1d36d44ee382ba6144f6ef361d1a9f23762eb0eb7fa355975350c2b339d674198abcb20e0
- SSDEEP 768:pkK60f5ksBejVX47kqfNZ1EhEEh8wxu2Ip4afeTxf1ml9dH3jLls:C+usB8VX47kqfNZ6X1f9U+fIbH3vls
- TLSH
  T1E8137D8A9B244482D517D670D282DE43F935F3529B62D7CF60A6838D0E277C1BB3D366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  imageformats/qtiff.dll
- Size 434KB
- SHA256 e0d37ba43fed59c34e786939afd8d98ef6f77611c1ab03c0ad9b7abeefb288d8
- MD5 4d21102a69f385335c28f7306eb13df8
- SHA1 397ca0541c5bfb696893e220db3318cf49fdf354
- SHA512 02d179cb695ad210a429dea02f55cc4dc70be675223258b91f24316d6a3c1014e9e1516717c0de6d486bb1bcd20d904dbc6f73cecc292c438e90e6b851b2309f
- SSDEEP 6144:X7b7GrJiM0yQB3WRL1yLBD3qmYxH3OvqEpTEEEEEE60HuoQ3DtRsz+dz4pluvbhY:P69ZYmmGq/Q3Dbnz8/
- TLSH
  T16194A505DED049ABD872813956E7C612F273F4853B12CB8B9698B1353F127D025AB2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  imageformats/qwbmp.dll
- Size 39KB
- SHA256 512d390c159f7a37efdc1e43b08db2a493ab9d6e7577c8d7dcb3972526496e2b
- MD5 d4806bbcaef2d633b44a04ac11c39930
- SHA1 7644fe78d6f11eec3ae8a10c91780ca42f45431b
- SHA512 43894d3570bf1ac3227fc4de310bd15b057af8c7d2b04bf37f7100d016635a9bdfb434fafa716ca2b6f381372a0a4e5390b61253292afa21462bc9228b953dac
- SSDEEP 768:5aVooyFmtxWX2xyjnl2OYomUEhEEh8wxu2Ip4/jTxf1ml6Z+7EHNgb+:ALyExWX2xyjnl2OYomVX1f9/hfILIg+
- TLSH
  T1D5036CAA9A694482F913DA74D2D6DE13E935F7924B52C7CF1176824E0D233C0BF38395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  imageformats/qwebp.dll
- Size 552KB
- SHA256 7c3e0e414d07e234f63459c627d3d0ba95f128b9289621e9576810c011f199b3
- MD5 67b00cbfc8e71c177b9b15afc60d0455
- SHA1 3821e42ad469586af5c1428babed8baf1310001a
- SHA512 e0e8b603f5809dbd3c0757c339d9e1c189dfeb2e2d771c7821709374464061f56077bb01505cfe84cbc5d22f9061a1c32962969cf99229132cacf64554962414
- SSDEEP 12288:vWhkkMhPwLrLrLrLWCYNVh5+6Z9mxkn518so:vWhBPLrLrLrLWCYNVhA6Z9mun518so
- TLSH
  T123C47C8ED99623D8D49BC4B88AFD965BF6A43C1D434095EB17D0B9293A33BC05737B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  jars/JavaCheck.jar
- Size 1KB
- SHA256 9a3ce879970517ed86f649360ea530dc14f4006b695c0935f98e10aa4be09803
- MD5 90ccfb92d70142be9ddba5505d9621a4
- SHA1 e6a58be1f39e3bdec88bf047436a23d640dc2915
- SHA512 19a8f658f4e535734f79d1b41f89cc88659a5b7a1eacc102b384c58b1aba4fdd389968e2e85e0a4ad3ad3e8549ca9ac901884ead94f839181fae5d6d51accb9d
- TLSH
  T10D2142667FD4C073F31B18BBE600B663852F0220954C821307E47E944C34B885D23CCE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  jars/NewLaunch.jar
- Size 13KB
- SHA256 5086c5086c78bc74dad6c7fe0e20fe904cfce6d9a67c63fce80f7907ca731eb6
- MD5 73a61d73e903e38c0d120c2cf19156a2
- SHA1 f425ce8b686d297ba61904b271a577b4ef31cc9c
- SHA512 f560dc5d68feaa68823cde516c84cbfe846dc087874d4e62d492336ea72669eb07dd8d905c5faea0ca23f5992b65d0cca0073a8ed7791399e1922f4d0924823f
- SSDEEP 384:QUJnof8bfW90XUaqNiW1e5Eq4pBMAYCmmSP:VJofcWy3+gENrD7+P
- TLSH
  T195526C16FED3C865F593837442D58FBB7C116684A0F162331BB26E95581CEDC5E03B88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32