ea999a8aa38b94f32688fb5129ec95e3c0ce7c918567447ffc945a5069a763b7

General

Target
Primordial Client Launcher-1.0.5-win64.exe
Size 2.5MB
Sample260905-hew9lsfr41
SHA256 ea999a8aa38b94f32688fb5129ec95e3c0ce7c918567447ffc945a5069a763b7
MD5 c4d44e86e8c61c26196c84cd4a4ef29e
SHA1 b75cee534157b6f2f7e0b93a225918403db56dc7
SHA512 cc83931311026e9f92cb4a6ca42f1fb3ade55b2f35f376c25ceb276ab3e628928cce91eca383d9bb64aa64bf3341eb9823ef9998dde23d7f084938cbe2fa98b1
SSDEEP 49152:IQo6YUZDJKv0QsmfA3YEOVwyCV0B7mdJwsZ84txY5uD9xmc8AJcHv:IdFEF40Qs0EOEV07sS4gYD9gdv
TLSH
T1F9C53399A2A8F547D51C0131E9BAC7F3B163F1110BE68B97BF24AB0B3854E11FD0E616
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Primordial Client Launcher-1.0.5-win64.exe
- Size 2.5MB
- SHA256 ea999a8aa38b94f32688fb5129ec95e3c0ce7c918567447ffc945a5069a763b7
- MD5 c4d44e86e8c61c26196c84cd4a4ef29e
- SHA1 b75cee534157b6f2f7e0b93a225918403db56dc7
- SHA512 cc83931311026e9f92cb4a6ca42f1fb3ade55b2f35f376c25ceb276ab3e628928cce91eca383d9bb64aa64bf3341eb9823ef9998dde23d7f084938cbe2fa98b1
- SSDEEP 49152:IQo6YUZDJKv0QsmfA3YEOVwyCV0B7mdJwsZ84txY5uD9xmc8AJcHv:IdFEF40Qs0EOEV07sS4gYD9gdv
- TLSH
  T1F9C53399A2A8F547D51C0131E9BAC7F3B163F1110BE68B97BF24AB0B3854E11FD0E616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
- MD5 7854290f8bc473fb9fad1917b0065731
- SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
- SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
- SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
- MD5 9ba64ba25b26b3964fe1ca1d331387ee
- SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
- SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
- SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
- TLSH
  T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
- MD5 a189f9b1c9ef05e23e5aed0bdb2a1bf4
- SHA1 584e9461cbb901aecabe61b4c3fbed146da0035f
- SHA512 d9f34ea10b8174c031b25dace65f092dacd0e582e3b8cf1779ca9721f50a896cdd3be2cb6738a7ae487a3f8dc1b4548045ac6ca875138003903b0e6e055412ee
- TLSH
  T1EE8173BB92E00CF3D0A44BB740A71CE362B5DD201756001F4A478AA92590B67EE7E715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  PrimordialClientLauncher.exe
- Size 5.8MB
- SHA256 006b6a89f2561acb51ce614434d9e033ad3c5a65b610ed1b19584866acc81aee
- MD5 873e81deb5d7df952dbeb938c5d8183d
- SHA1 1c8c23e887d689e8a9384f6a7fc37608ebd83a2e
- SHA512 2e1e4e6270efb7587de211abf720f6defd941352a5bac3d19736b979f6e61d99e7ed7e9512a998cc4a69532153e0a3f75e989281c1fa05b4d0a32ac4eba2e209
- SSDEEP 98304:L+4/X22a4sHJmWQe5HrJmqqJ2k3xwblry:ls4sHce51fkhml
- TLSH
  T177569EB2B2D140C5E027E1B90A976942B1B374860370B6C7E784A95AAF775E00EF77C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral6