1b914ad810639b50c5e910d6382a3c57acd492fd5076d373d11cf5affc0bbb53

Analysis

max time kernel
60s
max time network
49s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 19:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Primordial Client Launcher-1.0.4-win64.exe
Size 2.5MB
Sample260819-xpdbta1dle
SHA256 1b914ad810639b50c5e910d6382a3c57acd492fd5076d373d11cf5affc0bbb53
MD5 c549660560f0089776d012b07798e840
SHA1 3a1d04a539ac3754eeca5f99b99663700cf29db1
SHA512 1f23234ac986c4d30789289309ccb1743ec9f62d11e524f20b67a3fb84ebc7e978d48ee34a2b6504c45190133f9670f1f5f57750441e32678d287f7c1db9e861
SSDEEP 49152:IQija6sXna9oSLJMHl8bwVvxN3P/RhzZIunT7nULHm:IHjEK9oSLJCVn3RpZIMT4Dm
TLSH
T10DC5338573E2C673E9984B3189D2D26F2433B625018FDC4BB700631F69537E9ED9926C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
1840	Primordial Client Launcher-1.0.4-win64.exe
1840	Primordial Client Launcher-1.0.4-win64.exe
1840	Primordial Client Launcher-1.0.4-win64.exe
1840	Primordial Client Launcher-1.0.4-win64.exe
1840	Primordial Client Launcher-1.0.4-win64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Primordial Client Launcher-1.0.4-win64.exe

C:\Users\Admin\AppData\Local\Temp\Primordial Client Launcher-1.0.4-win64.exe
"C:\Users\Admin\AppData\Local\Temp\Primordial Client Launcher-1.0.4-win64.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx4964.tmp\InstallOptions.dll
Size 15KB
SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
MD5 7854290f8bc473fb9fad1917b0065731
SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
TLSH
T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx4964.tmp\StartMenu.dll
Size 7KB
SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
MD5 9ba64ba25b26b3964fe1ca1d331387ee
SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
TLSH
T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx4964.tmp\UserInfo.dll
Size 4KB
SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
MD5 a189f9b1c9ef05e23e5aed0bdb2a1bf4
SHA1 584e9461cbb901aecabe61b4c3fbed146da0035f
SHA512 d9f34ea10b8174c031b25dace65f092dacd0e582e3b8cf1779ca9721f50a896cdd3be2cb6738a7ae487a3f8dc1b4548045ac6ca875138003903b0e6e055412ee
TLSH
T1EE8173BB92E00CF3D0A44BB740A71CE362B5DD201756001F4A478AA92590B67EE7E715
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsx4964.tmp\ioSpecial.ini
Size 1KB
SHA256 66bb969deedadb0e71b88e107907bafa3a03d67cfbe5385c753f6310b0d10bd9
MD5 78ef1ca95aa200dbe8b844d2344a3bf8
SHA1 2ae2e7ef4848c6799d0b17e038b5da234b707d03
SHA512 4e61522dc6a552e7c9864094a5266abf68de3ab49b8074b68317bf6ae1f14a4f8fba68a1f2c4e28f21df182e10a7f322e2193bf2153bc21b8ae1c89a262c734c
TLSH
T1EA218C537BFD1108F2FBBB54FEB541748B7A7C16A839D50D81D0090E09E5B408963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsx4964.tmp\ioSpecial.ini
Size 1KB
SHA256 511bb796fcb2eecf0c29e11d2e658a61c84fb91d312bc31d8fbae36a8b002e25
MD5 5b91348a039f7f520fbeefbd6aabc2ff
SHA1 4b2b21b126b807ddcd7eaed09637a834fcd1f08d
SHA512 490359b22845e2a8a7c3a45e7ee956fb1051a8479778c1b469f84fab50983c485261443026d6bb8048fdd90e96861beabe2b9a46c8e04e43c5e7f41b03b0d2a2
TLSH
T192317E437BFD1518F2BBB754FEB541759B3A7C16A838C50D41C10A0E08E5A408963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads