PrimordialClientLauncher[.]exe

Resubmissions

31/08/2026, 14:25

260831-rrbccawxd1

31/08/2026, 14:18

260831-rmh7dsbm6y7

Sharing

Copy URL Twitter E-mail

General

Target
PrimordialClientLauncher.exe
Size 5.8MB
Sample260831-rrbccawxd1
SHA256 67ec5efab0d5cd628de2a80d3b593b6d73fde5de725d6e720755a310714a4f8e
MD5 cb5f0f37e81fac4bb61a83a55fa3c55d
SHA1 df6b9cf079916f1ad5eeb9d3937b7a1326d2f1fc
SHA512 7e146d91b32b603ee340fd0d5ead9a9e5c8811beb8c0714c6eaba74c8562370f2983df9661eba722f2164bd74a40bc730433b2341b87fb8dc04d865f199546cc
SSDEEP 49152:Gt1JLmTsMavr4TIIdVEXR4sE1Hoa5WDSUX2C5IDfmmqX4vAf/bbakaaknC3PMC0:VHB8R43SKmyl5HrJmqqJ7R/bDc8Ny
TLSH
T131569D6233D100D2F017E1B90E96A942B5B73886477066C7EAC4995EAF7B5E00EF72C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PrimordialClientLauncher.exe

File Explorer

PrimordialClientLauncher.exe

.exe 5.8MB

PrimordialClientLauncher.exe

IMPHASH 0d7229f0e6966de01c5d6b6bf35e1386
SHA256 67ec5efab0d5cd628de2a80d3b593b6d73fde5de725d6e720755a310714a4f8e
MD5 cb5f0f37e81fac4bb61a83a55fa3c55d
SHA1 df6b9cf079916f1ad5eeb9d3937b7a1326d2f1fc
SHA512 7e146d91b32b603ee340fd0d5ead9a9e5c8811beb8c0714c6eaba74c8562370f2983df9661eba722f2164bd74a40bc730433b2341b87fb8dc04d865f199546cc
SSDEEP 49152:Gt1JLmTsMavr4TIIdVEXR4sE1Hoa5WDSUX2C5IDfmmqX4vAf/bbakaaknC3PMC0:VHB8R43SKmyl5HrJmqqJ7R/bDc8Ny
TLSH
T131569D6233D100D2F017E1B90E96A942B5B73886477066C7EAC4995EAF7B5E00EF72C7
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2627568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

winhttp

WinHttpReceiveResponse WinHttpSendRequest WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpAddRequestHeaders WinHttpSetOption WinHttpOpenRequest WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpReadData

ws2_32

inet_pton WSAWaitForMultipleEvents WSAEventSelect getaddrinfo WSAStartup accept bind closesocket htonl htons WSACloseEvent WSACreateEvent WSAEnumNetworkEvents listen recv select WSACleanup freeaddrinfo socket shutdown send

bcrypt

BCryptGenRandom

crypt32

CryptUnprotectData CertCloseStore CertOpenStore CryptProtectData CertEnumCertificatesInStore CertFreeCertificateContext

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

wsock32

connect WSASetLastError __WSAFDIsSet WSAGetLastError setsockopt inet_ntoa

kernel32

IsValidLocale GetLocaleInfoW LCMapStringW LoadLibraryExW VirtualProtect GetFileType HeapAlloc HeapFree GetUserDefaultLCID IsValidCodePage GetACP UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetStdHandle GetModuleFileNameW TerminateProcess ExitProcess IsProcessorFeaturePresent GetModuleHandleExW GetOEMCP EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode ReadConsoleW FreeLibraryAndExitThread ExitThread CreateThread RtlUnwind FlsFree FlsSetValue FlsGetValue FlsAlloc CreateDirectoryW CreateFileW DeleteFileW FlushFileBuffers GetFileInformationByHandle GetFileSizeEx ReadFile RemoveDirectoryW SetFileAttributesW SetFilePointerEx WriteFile GetTempPathW CloseHandle GetLastError SetLastError WaitForSingleObject CreateMutexW Sleep GetCurrentProcess CreateRemoteThread GetExitCodeThread OpenProcess GetSystemTimeAsFileTime FindFirstFileExW VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleHandleA GetProcAddress LocalFree MulDiv QueryFullProcessImageNameW MoveFileExW MultiByteToWideChar WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary LoadLibraryA GetLocaleInfoA IsDBCSLeadByte RaiseException SetEvent ResetEvent CreateEventA FormatMessageA FindClose FindNextFileW MoveFileExA CreateFileA FindFirstFileA FindNextFileA GetFileSize InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MapViewOfFile UnmapViewOfFile CreateFileMappingA WakeAllConditionVariable WakeConditionVariable SleepConditionVariableSRW AcquireSRWLockExclusive ReleaseSRWLockExclusive GetCurrentThreadId WaitForSingleObjectEx GetSystemTimePreciseAsFileTime GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetProcessHeap SetStdHandle HeapSize GetCurrentProcessId InitializeSListHead RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx HeapReAlloc SetEndOfFile GetTickCount64 WriteConsoleW InitializeCriticalSectionEx

user32

SetCursor ClientToScreen ScreenToClient LoadCursorA SetCursorPos GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData GetClientRect IsWindowUnicode SetClipboardData CloseClipboard OpenClipboard SetProcessDpiAwarenessContext GetDpiForSystem SetProcessDPIAware MonitorFromPoint LoadImageW GetCapture GetWindowThreadProcessId FindWindowW GetCursorPos GetWindowRect GetWindowTextW SetWindowRgn SetForegroundWindow GetForegroundWindow UpdateWindow GetSystemMetrics MsgWaitForMultipleObjectsEx ReleaseCapture SetCapture IsIconic IsWindowVisible SetWindowPos ShowWindow DestroyWindow IsWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW SendMessageW PeekMessageA DispatchMessageA TranslateMessage LoadIconW GetKeyState

shell32

SHGetKnownFolderPath ShellExecuteExW ShellExecuteA ShellExecuteW

ole32

CoCreateInstance CoInitializeEx CoUninitialize CoTaskMemFree

advapi32

GetTokenInformation OpenProcessToken GetSidSubAuthority GetSidSubAuthorityCount

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmpa

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

PrimordialClientLauncher.exe

dwmapi

api-ms-win-shcore-scaling-l1-1-1

winhttp

ws2_32

bcrypt

crypt32

version

d3d11

d3dcompiler_47

imm32

wsock32

kernel32

user32

shell32

ole32

advapi32

generic