General
- Target Primordial Client Launcher-1.0.5-win64.exe
- Size 2.5MB
- Sample260831-mf68esgr5s
- SHA256 9d2d386d81dcfe463915f083ef7780d4eca14f345334ac02987572bb7ad8aedb
Score
7/10
Malware Config
Targets
-
- Target Primordial Client Launcher-1.0.5-win64.exe
- Size 2.5MB
- SHA256 9d2d386d81dcfe463915f083ef7780d4eca14f345334ac02987572bb7ad8aedb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
Score3/10 -
- Target PrimordialClientLauncher.exe
- Size 5.8MB
- SHA256 7fef647102ea658c49082fc56d04683352ccf146ffbf0d1d372ebc9630867a77
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.