dd6263ddb837cbe64df831378b3b32c0b72d36705fc3b35856229944d9bbdee8

Analysis

max time kernel
150s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 21:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Primordial Client Launcher-1.0.5-win64.exe
Size 2.5MB
Sample260826-1mlrysvsbw
SHA256 dd6263ddb837cbe64df831378b3b32c0b72d36705fc3b35856229944d9bbdee8
MD5 fd609e520698afdecd82d47c7c91a0df
SHA1 72b9cbb5cea5cc18e19e1d276ab00e59af6fe514
SHA512 8c086976e0a109dc80bd5b6bb339b40e35a28b7de0cfc4b37d7da00675076486b6bb3ed113da4cecc65909912031c2804c1e3096b3524d9be1df19d3515b8b50
SSDEEP 49152:IQPCo7JiSbDhr3V60O+G89fYqCK6L/B7x1+ibQMCsUnl9s2C1WzKXZnyLC+Ymsi5:IUJiwN3E0O+G8Z3V6L/B7P+ibQEUnl9R
TLSH
T15CC53342F1F0C823DDB227324BFA97F33227B552A4819A137A58821F1D4BD45DE2A19E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
4544	Primordial Client Launcher-1.0.5-win64.exe
4544	Primordial Client Launcher-1.0.5-win64.exe
4544	Primordial Client Launcher-1.0.5-win64.exe
4544	Primordial Client Launcher-1.0.5-win64.exe
4544	Primordial Client Launcher-1.0.5-win64.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Primordial Client Launcher-1.0.5-win64.exe

C:\Users\Admin\AppData\Local\Temp\Primordial Client Launcher-1.0.5-win64.exe
"C:\Users\Admin\AppData\Local\Temp\Primordial Client Launcher-1.0.5-win64.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsj652A.tmp\InstallOptions.dll
Size 15KB
SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
MD5 7854290f8bc473fb9fad1917b0065731
SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
TLSH
T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsj652A.tmp\StartMenu.dll
Size 7KB
SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
MD5 9ba64ba25b26b3964fe1ca1d331387ee
SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
TLSH
T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsj652A.tmp\UserInfo.dll
Size 4KB
SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
MD5 a189f9b1c9ef05e23e5aed0bdb2a1bf4
SHA1 584e9461cbb901aecabe61b4c3fbed146da0035f
SHA512 d9f34ea10b8174c031b25dace65f092dacd0e582e3b8cf1779ca9721f50a896cdd3be2cb6738a7ae487a3f8dc1b4548045ac6ca875138003903b0e6e055412ee
TLSH
T1EE8173BB92E00CF3D0A44BB740A71CE362B5DD201756001F4A478AA92590B67EE7E715
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsj652A.tmp\ioSpecial.ini
Size 1KB
SHA256 30e748050b290ae43ebdd9435ebc9032eb41606a73e234aa447dffd29dc84857
MD5 6f505b490debb699efe3420668b051d0
SHA1 78d98a8e3ad18db288c53a089e4dda2b74469eb3
SHA512 1cfce6ed9c5848e7290f9658a6dfd2cea9ad813111ba1c5399a67263ac193bb8f3e3d5f03b0bed4f607274250dcd1f15732b969c9a20e7d5d7292c3537bb14fd
TLSH
T134317C537BFD1508F2FBB754FEB541749B7A7C16A838C50D41C10A0E09E6A408963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads