bead995ce4c23057d971954c8fefbe1a7299f061910d290d054a961fb0600ebc | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Primordial...64.exe

windows10-2004-x64

7

Primordial...64.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ns.ini

windows10-2004-x64

1

$PLUGINSDI...ns.ini

windows11-ltsc_2024-x64

1

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...al.ini

windows10-2004-x64

1

$PLUGINSDI...al.ini

windows11-ltsc_2024-x64

1

$PLUGINSDI...er.bmp

windows10-2004-x64

1

$PLUGINSDI...er.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

Primordial...er.exe

windows10-2004-x64

7

Primordial...er.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Primordial Client Launcher-1.0.5-win64.exe
Size 2.5MB
Sample260910-ert38szsat
SHA256 bead995ce4c23057d971954c8fefbe1a7299f061910d290d054a961fb0600ebc
MD5 3182f9cb597ae05653b2fd9c087ea647
SHA1 362e9dc4e8e9de61825135078ded80bee0c0fb06
SHA512 409cfc2bd378ed3f61754ac3ee409dafa8dfae87d5d1f82d1d376b38c0ee8a1e7f12e9ba525b2ef8a86720e8f644a60ded9954212e3a6a9d5647cee0cd587b4a
SSDEEP 49152:IQV2cvavq8HaQvFS4NHA3GtmopdhnHNE02L54fuEskgwKMwIegH5:I+2s3AZA3OmOdhS02LEfRPreq5
TLSH
T1DCC53302E2B5E468E1A65938C3D0C723A5B2724C7328CED7F701A39DD816D88F56EBD5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Primordial Client Launcher-1.0.5-win64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Primordial Client Launcher-1.0.5-win64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/NSIS.InstallOptions.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/NSIS.InstallOptions.ini

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/ioSpecial.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/ioSpecial.ini

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/modern-header.bmp

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/modern-header.bmp

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

PrimordialClientLauncher.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral20

Sample

PrimordialClientLauncher.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  Primordial Client Launcher-1.0.5-win64.exe
- Size 2.5MB
- SHA256 bead995ce4c23057d971954c8fefbe1a7299f061910d290d054a961fb0600ebc
- MD5 3182f9cb597ae05653b2fd9c087ea647
- SHA1 362e9dc4e8e9de61825135078ded80bee0c0fb06
- SHA512 409cfc2bd378ed3f61754ac3ee409dafa8dfae87d5d1f82d1d376b38c0ee8a1e7f12e9ba525b2ef8a86720e8f644a60ded9954212e3a6a9d5647cee0cd587b4a
- SSDEEP 49152:IQV2cvavq8HaQvFS4NHA3GtmopdhnHNE02L54fuEskgwKMwIegH5:I+2s3AZA3OmOdhS02LEfRPreq5
- TLSH
  T1DCC53302E2B5E468E1A65938C3D0C723A5B2724C7328CED7F701A39DD816D88F56EBD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
- MD5 7854290f8bc473fb9fad1917b0065731
- SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
- SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
- SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/NSIS.InstallOptions.ini
- Size 460B
- SHA256 83bbf3a3ce51ace6e7002cf31a1e5ad77745604a2f260044e647c36225068a31
- MD5 00c50f359e70e66ba289871640f5b53c
- SHA1 e94a397023f5c59b7c2df4b3f25bd60e21e31abf
- SHA512 889c6d8034a3c2d517e017a6b3d755315895e571b0961e204bc114185711f095e0d9597cee03630f64f72a510d96bcf11d57e9854aa1b930fb0b148ae06e5a85
- TLSH
  T1F6F0A08D9810D22AC0309042387B669277D02D201A4338F1F3BA68C7BF88DD32D9DAD9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 33a6c41f262fe4f5f5eada6c3dca5d1a6512bf09bd09e05b223882630fd24e89
- MD5 9ba64ba25b26b3964fe1ca1d331387ee
- SHA1 305e7ef9bec45556fe2de80d0ab107f12a8f4eee
- SHA512 741f72b15f6f138c0fd0ccf799dd031c731e79b54eb417a615a04d53eed72891f92196beb03795fad990c158cd358b460ecb6eefed5fc2ef53400310b2249df4
- SSDEEP 96:ZIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/O3lkCTcaqHCI:+hE+A0+sF6piUFkA6lncviI
- TLSH
  T1DFF1C776F3D20673FAAB427428232F231B2AF521576981A6490316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
- MD5 a189f9b1c9ef05e23e5aed0bdb2a1bf4
- SHA1 584e9461cbb901aecabe61b4c3fbed146da0035f
- SHA512 d9f34ea10b8174c031b25dace65f092dacd0e582e3b8cf1779ca9721f50a896cdd3be2cb6738a7ae487a3f8dc1b4548045ac6ca875138003903b0e6e055412ee
- TLSH
  T1EE8173BB92E00CF3D0A44BB740A71CE362B5DD201756001F4A478AA92590B67EE7E715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/ioSpecial.ini
- Size 211B
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- TLSH
  T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 9KB
- SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
- MD5 940c56737bf9bb69ce7a31c623d4e87a
- SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
- SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
- SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
- TLSH
  T1D312A8869D83DC42EC4F7F71E3E6A05320E0690A052FBAD56F3634D6E65F88B672410B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  PrimordialClientLauncher.exe
- Size 5.8MB
- SHA256 94f57ce8cfcba4f745cca4c67f90707da7498ffc9871a5fce7efe8300c637ba2
- MD5 c11ce13623c6a0255bdede52bdf8fe0b
- SHA1 3d45dcfde567b6c0dc117460dbd747038b6bab85
- SHA512 102a41c47ca247753f221e48601c6ff5e1798fba9d61f7660ce0e7c3a0532072cb2147dcc8f9d4300c8cbf445a808452644e540c983fbed7cb7676992a22a021
- SSDEEP 98304:oh7/1O9IbAusI5yI5Zs+yW5HrJmqqJkXxeQ6qy4:WZOqAunwOV511hb6q
- TLSH
  T117569D6172D150C4E017E1B959A6A942F1B3788A037162C7F684996EAF7B5F00EFB3C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy