aaf1f371a41d530785b679e3a2e1141dceec98651fc35d56dc0842b2740280ae

Sharing

Copy URL Twitter E-mail

General

Target
PrismLauncher-Windows-MSVC-Setup-11.1.1.exe
Size 22.9MB
Sample261007-3pmhdaxvev
SHA256 aaf1f371a41d530785b679e3a2e1141dceec98651fc35d56dc0842b2740280ae
MD5 3b94e5f885f9d58d9c00ac22ea2f9f96
SHA1 92791ac895a4d56045b2df2cb4968b9a49716db1
SHA512 3ad415d6966512060d104a6cc11ebf91d2f95f16631fcefe3fc2047b7d26cb7dc8b45f1662f309fe30b65da0b36d83b4b87360e4730ec4079477293662917e89
SSDEEP 393216:P89V1xydzZGTDmA22gHMr7Sc733UoUnOw0WcKM/YUav12nwezk8/WkrdEoUiHEjI:P89pydzZFlsr7Z3VUnO3/Yj8Dzk8/WGZ
TLSH
T1F93723CE77740114D28A4F38D79AA4C03909BD2726F0E877AA67F0DAECB4AD9459DC0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  PrismLauncher-Windows-MSVC-Setup-11.1.1.exe
- Size 22.9MB
- SHA256 aaf1f371a41d530785b679e3a2e1141dceec98651fc35d56dc0842b2740280ae
- MD5 3b94e5f885f9d58d9c00ac22ea2f9f96
- SHA1 92791ac895a4d56045b2df2cb4968b9a49716db1
- SHA512 3ad415d6966512060d104a6cc11ebf91d2f95f16631fcefe3fc2047b7d26cb7dc8b45f1662f309fe30b65da0b36d83b4b87360e4730ec4079477293662917e89
- SSDEEP 393216:P89V1xydzZGTDmA22gHMr7Sc733UoUnOw0WcKM/YUav12nwezk8/WkrdEoUiHEjI:P89pydzZFlsr7Z3VUnO3/Yj8Dzk8/WGZ
- TLSH
  T1F93723CE77740114D28A4F38D79AA4C03909BD2726F0E877AA67F0DAECB4AD9459DC0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion discovery ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
- MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
- SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
- SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
- SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
- TLSH
  T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Qt6Core.dll
- Size 9.8MB
- SHA256 eb0ecdcefd37974a30d0b70d7f0f7d35419eb820ff2d7cef3720d00e084531cb
- MD5 eaaa645601146e9b8f9b77160e72743c
- SHA1 877eae78317c7899b87b349709e8888d57d194c9
- SHA512 68f852db8d0e8e4167278694a3a4fb40851989d0f63c847e4aef33c367aaa47bda3d65a8296047e254cde69b24f0ce515480ecf67b62965aee40bf29040190e8
- SSDEEP 98304:4VLKyLebAofeVMKFdu9CwJsv6t6mJMSKgVcC/3cc:WWPBSMKFdu9CwJsv6t6mSStZ/3V
- TLSH
  T1B3A6390766FA0011FAFBDA34DAB75112DBB27C466B3496DF025861185E337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 78ba25d8d68936f4d45de779e41685d891f829cd05b6f84342845cd606bec3d9
- MD5 598cdfd449814175a3de7cab1d1c107b
- SHA1 1845fd9ea0a4e936aea1328c97cab5fb5a112773
- SHA512 52fb362ef8f2d612d929f056e87532218c41b5579be68918bc1dc746fe301e86b4cfad313488a4e1a7c55f70545c1763a442a440c0a144cafc8ee84cf89324d3
- SSDEEP 98304:917B8zKQ16be6OAZl5XWv7StQiYBNXcqQYOPTmeL:d6ie6ZZTdtQiYBNMVPTmI
- TLSH
  T13DA68D57A2AA11D8D57BD13CCB9B9517EBB2701503629BDB01A0CA152F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 9920f5fc17a19f5ba28dc780cba5cb8956994ed7a37f92690f7ffd844e568fcc
- MD5 a58c091cbbf68a7ed17b1306cba4172f
- SHA1 40cd9a4f3970cc79001e20dceaffca55e2e17180
- SHA512 752b4a8ce1d12bd044e0bb0afc99bd2830dd58801a81aa37cdef0ae407738361e5a28be9a320affb4eeeadd9132a1fdc41298b038149443c83c8101ff20b10cd
- SSDEEP 12288:w9onO5TLgx8PlBYyrw3hutJJ5za2rJq9OeBEd4yhexi9TQ75L3EXpX1m1:B83gxGmFRiJJ51rJq9OvdDhOi+75mXI1
- TLSH
  T160856C57A3A441D6D56ED139CB4B8A0BF772700483669BDF02658E152F73BE22B3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Qt6NetworkAuth.dll
- Size 289KB
- SHA256 116f20f77ca4e8a5a946c3d5b723915625ef7877ef043edc8619bfd4b7d79d3f
- MD5 cd6b2572da1d1ab61e0ce8f951d5fca1
- SHA1 912d56c3f689087221257d8a9394b414c5fd39e9
- SHA512 cfd9f7bb895e024006c429408eb10ed38dddb55aa9b370ebd0a4e0b5882b0a344e1e92bd22627712e4a47b61b9d9a4d058efbe1c9dd336b368c0f75bd6536463
- SSDEEP 3072:4PntlHGgash+B1RBKQ5NSuxBqcKu215Pdp8CqhwoLW1kJERAXWBJnuo1kIuxmwBv:+/+B5N5Bqcf215PdpToyyiuGux9BTjn
- TLSH
  T1F7542857A3A20DC2DC2BC179C65B8613E6B3B4004752DBEF46618B4A1F677E2BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Qt6OpenGL.dll
- Size 1.9MB
- SHA256 5e7f2223d327776e13d08e6390d97b951d9e7d2354aa295cea88a489aa112d8c
- MD5 0d6983fc617e8aa7f7a89d215f609def
- SHA1 2b07a196cd9de8cbba3c0a9e415f8b7ac78b9530
- SHA512 fbb6a5ef9692f1adc868a6697455ff8373e5d16a042cd350845979e0715af19ff61064c4c99d9158779cdcf0171b884049bed06b82bcd28dfc896c15b7d40910
- SSDEEP 12288:NyA2ngdKBJuEum86y+TjfI1CkX9RDYXKI297FcVlE/LY9Q0:GaYum9V/feRzDYucGLY9x
- TLSH
  T18E950FD5624AB622C976E2BE934F057E60F3AD53C3424BC388155B490AB57EE0B7FC06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Qt6Svg.dll
- Size 620KB
- SHA256 dc79df244469f8e4b0dbed80653cb2826285c35a6bca2f61712205035ba8e764
- MD5 c3b51580a87f11360af4e1fedf63f773
- SHA1 c498dcde71f9c994757c7a1203c8b6a4c00785b7
- SHA512 b473785c2d78bba67e64b737308290cad17a90d7b2872825c546ad5e3a31da7ccdd899c719f8bc936ff585beb9b9dd52632be6e98a927ad6a2a9f5c099d47645
- SSDEEP 6144:t10fGG/FNHToqobivsTRkcjIfIl3mIRuo2zibhHmCBGyOkOc0CH4x5Yj7Fm3yWZZ:t10e+NH0xb7rZmIRWWZmCRmc0mx5f+
- TLSH
  T165D45D67B3A60786D4AAD13CCB5B8422EB7370440362D7EF41B58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 57ed72df2efbc87a5dbaceadeea38d0fe31d4a77925dcb3faa48441025957cc9
- MD5 e0196a876582340045795ffeb0f9ae52
- SHA1 1d583a178c5f6c23adda7962cc1d3c1370c14bb9
- SHA512 35ba6c01ba1e8bf69e3243d219345f6a25c62d1f48f2effd5187f5d0f0c86188a28024ba0d604c8ccacacd9721201aaec8f3f55f6f8fe15576dc0fccbe0fe672
- SSDEEP 98304:JLNqD/uTGvqxgiJaj4mxHJpd9tozE2XJHTYM:5NqDaGvqxgiJajFxHJpd9tozE2XJzD
- TLSH
  T138667B5763EA0185C5AFD13DCB0B8A17E6B2700443229BCB1169CE592F73BE16E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Qt6Xml.dll
- Size 159KB
- SHA256 6bbc1330afab946dcf3bf6a64f8b43e29531d5202d263cfe5fe8f23b02c6c25e
- MD5 0c9d725c170416435688139bf6ff001a
- SHA1 ac7733e8b87e644229364018e38d6b65b139e47b
- SHA512 cfd808043d4b8f422867cd561addfc69c8ef5d9c8ea68748c038f38f98feda835537e0ae4f6767d3d0cf61792e9ffdfbf8c82765e1872d830f8fb215466c42c2
- SSDEEP 1536:D7LLdm+5hICv8Q0wCslIfO80V+NFu4jRcDXIDlvxe2obYTQj9sYpxABNq4pRpcfr:DrfA7QIm/VWRcDXIDa29YjAPqEflT9C
- TLSH
  T10DF34A8773684286D56AC278CA0B490BFB73709157229BEF81658A392F53FC27E7D350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  archive.dll
- Size 731KB
- SHA256 dea602df2fb4a3cc8a7cfc5f28c8c0e98e7b39f195ce874a9028d2ccdb3c140d
- MD5 f1a1e4cb92afd5411a75c622eded78dc
- SHA1 4afbef73bc6c491e3335dd8d8ccb949a3a0eb50b
- SHA512 d5085a9c2ea7c030f6c2d7f3874ce9821eb36d8312bcef9b3f4fadcd1de5c0dec9635bbcf0fe593cc5f9e5da9efa78b150b9718180ea43de458e7ad725b8e17e
- SSDEEP 12288:0MSFVwT75qJOwJXSD46qTzWftKgQNjVEcNjzxwPuqCcMzicsJ:tSFVwT75qEtXm8KgQNjVTNjzxwjnSr+
- TLSH
  T1E2F48D82BBF40668E977C1348546AA27F3F1F0551760DBDF06A487653F23EE22A3A351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  bz2.dll
- Size 90KB
- SHA256 9d50a4fb8034e0a8c8c19afdb1aa11f3b987c9f725e678a68eebd9beae41f32b
- MD5 092edac08980aae3c56c7b2a652e7026
- SHA1 c9155bc2f2f0d4dc54cca93c57be3b1eb96c54c2
- SHA512 c01ad1b2500bc8bbbdffbb4475ed7dcdeab28385d8f2e5017b48c13d65b32c3176bbe80ecdf2ccfc19d4f8234e76fd77ffd78fd6cee47b867ba085792f7aa5ee
- SSDEEP 1536:DBVEJbODux1isWQ2d/ZGl3Ta5c/aBPEDDc3hTLx+ti8yIpRpcf9kfIYX7AYK:puxAUhbrYVLxGVy0fU5
- TLSH
  T19A936C4476A3FBBDDA9BC43896620747FF34BE690B1117BB3560C2BA2B127D10E7411A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  cmark.dll
- Size 155KB
- SHA256 dab8255ff7ed3b0a60997c387db622d175fcffbe76d8a879be1fb4737ca2d77e
- MD5 141dcea4994e99a833f73a51d6b3849b
- SHA1 37215af854a49f026c59fff6047b8546ffead776
- SHA512 202376527c6ff7f300fbbf299899d29c08b2fc19247d0b978fa6810dd184da56fb2d1ef6d9bc0b28ba4a13463bbd35317aabc50dafdd83cff398b49d0cbc7972
- SSDEEP 3072:D5FnWcwoMEnY4Js2CVskFVtTmjq8yKEsj0oCLIiK+UfWTMi:bWcBSGsvVlFVtaOmROEiK+NMi
- TLSH
  T1CAF35B86E5BC0066CD1BE07C4D6EE986E3BAB3173310C2E716404E65B9E7BE27635352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32