Overview
overview
7Static
static
3prism laun...rs.rar
windows11-21h2-x64
7PrismLaunc....4.exe
windows11-21h2-x64
7$PLUGINSDI...rl.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...rd.bmp
windows11-21h2-x64
$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3Qt6Core.dll
windows11-21h2-x64
1Qt6Core5Compat.dll
windows11-21h2-x64
1Qt6Gui.dll
windows11-21h2-x64
1Qt6Network.dll
windows11-21h2-x64
1Qt6NetworkAuth.dll
windows11-21h2-x64
1Qt6Svg.dll
windows11-21h2-x64
1Qt6Widgets.dll
windows11-21h2-x64
1Qt6Xml.dll
windows11-21h2-x64
1iconengine...on.dll
windows11-21h2-x64
1imageformats/qgif.dll
windows11-21h2-x64
1imageforma...ns.dll
windows11-21h2-x64
1imageformats/qico.dll
windows11-21h2-x64
1imageforma...eg.dll
windows11-21h2-x64
1imageformats/qsvg.dll
windows11-21h2-x64
1imageforma...mp.dll
windows11-21h2-x64
1imageforma...bp.dll
windows11-21h2-x64
1jars/JavaCheck.jar
windows11-21h2-x64
1jars/NewLaunch.jar
windows11-21h2-x64
1jars/NewLa...cy.jar
windows11-21h2-x64
1platforms/...2d.dll
windows11-21h2-x64
1platforms/...ws.dll
windows11-21h2-x64
1prismlauncher.exe
windows11-21h2-x64
1qt.conf
windows11-21h2-x64
3qtlogging.ini
windows11-21h2-x64
3accounts.json
windows11-21h2-x64
3General
- Target prism launcher old badu é lindo rs.rar
- Size 20.9MB
- Sample261020-xbebysvz6p
- SHA256 e5d7e093626dfdcb8c1935ec766219d15698119350fcad0469aab80745b308eb
- MD5 6f7455ceab2c09713744d621cbcc67d4
- SHA1 755d1b46855c6c7fad846325b87b21beac100d0a
- SHA512 6203e8385168311dfafc2e305aabd117ccef743696b6959ce8102fb7789faddf2db4a86d100fb420a5e620a2e13f093b30e0e3e16d37e926352c8bfb5a677081
- SSDEEP 393216:6nTDy02kZ/FgwPqH1tDpzCbenjgUbjpzVNNCPeCyYfWtXstt25w:6nf6RzawJpNnYfQ8ttMw
- TLSH T17127332CC27F28EE0ACC91B15EAA9CFDDBCA94D5897F1748B4CD1410EBB5BB43594824
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
prism launcher old badu é lindo rs.rar
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
PrismLauncher-Windows-MSVC-Setup-9.4.exe
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NScurl.dll
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
Qt6Core.dll
Resource
win11-20260911-en
Behavioral task
behavioral9
Sample
Qt6Core5Compat.dll
Resource
win11-20260911-en
Behavioral task
behavioral10
Sample
Qt6Gui.dll
Resource
win11-20260911-en
Behavioral task
behavioral11
Sample
Qt6Network.dll
Resource
win11-20260911-en
Behavioral task
behavioral12
Sample
Qt6NetworkAuth.dll
Resource
win11-20260911-en
Behavioral task
behavioral13
Sample
Qt6Svg.dll
Resource
win11-20260911-en
Behavioral task
behavioral14
Sample
Qt6Widgets.dll
Resource
win11-20260911-en
Behavioral task
behavioral15
Sample
Qt6Xml.dll
Resource
win11-20260911-en
Behavioral task
behavioral16
Sample
iconengines/qsvgicon.dll
Resource
win11-20260911-en
Behavioral task
behavioral17
Sample
imageformats/qgif.dll
Resource
win11-20260911-en
Behavioral task
behavioral18
Sample
imageformats/qicns.dll
Resource
win11-20260911-en
Behavioral task
behavioral19
Sample
imageformats/qico.dll
Resource
win11-20260911-en
Behavioral task
behavioral20
Sample
imageformats/qjpeg.dll
Resource
win11-20260911-en
Behavioral task
behavioral21
Sample
imageformats/qsvg.dll
Resource
win11-20260911-en
Behavioral task
behavioral22
Sample
imageformats/qwbmp.dll
Resource
win11-20260911-en
Behavioral task
behavioral23
Sample
imageformats/qwebp.dll
Resource
win11-20260911-en
Behavioral task
behavioral24
Sample
jars/JavaCheck.jar
Resource
win11-20260911-en
Behavioral task
behavioral25
Sample
jars/NewLaunch.jar
Resource
win11-20260911-en
Behavioral task
behavioral26
Sample
jars/NewLaunchLegacy.jar
Resource
win11-20260911-en
Behavioral task
behavioral27
Sample
platforms/qdirect2d.dll
Resource
win11-20260911-en
Behavioral task
behavioral28
Sample
platforms/qwindows.dll
Resource
win11-20260911-en
Behavioral task
behavioral29
Sample
prismlauncher.exe
Resource
win11-20260911-en
Behavioral task
behavioral30
Sample
qt.conf
Resource
win11-20260911-en
Behavioral task
behavioral31
Sample
qtlogging.ini
Resource
win11-20260911-en
Behavioral task
behavioral32
Sample
accounts.json
Resource
win11-20260911-en
Malware Config
Targets
-
- Target prism launcher old badu é lindo rs.rar
- Size 20.9MB
- SHA256 e5d7e093626dfdcb8c1935ec766219d15698119350fcad0469aab80745b308eb
- MD5 6f7455ceab2c09713744d621cbcc67d4
- SHA1 755d1b46855c6c7fad846325b87b21beac100d0a
- SHA512 6203e8385168311dfafc2e305aabd117ccef743696b6959ce8102fb7789faddf2db4a86d100fb420a5e620a2e13f093b30e0e3e16d37e926352c8bfb5a677081
- SSDEEP 393216:6nTDy02kZ/FgwPqH1tDpzCbenjgUbjpzVNNCPeCyYfWtXstt25w:6nf6RzawJpNnYfQ8ttMw
- TLSH T17127332CC27F28EE0ACC91B15EAA9CFDDBCA94D5897F1748B4CD1410EBB5BB43594824
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
-
- Target PrismLauncher-Windows-MSVC-Setup-9.4.exe
- Size 21.3MB
- SHA256 15f8c7dc20bc98e803270c21125ac3f8178fbabae7bdf142c5c2f5596802342d
- MD5 d83549f75c9f55a4696bfe1b7979e4fd
- SHA1 753688c31dd5bfc34b5bf23773f0e1ab14bf84f1
- SHA512 9e9f110f0a073a23647842ecdf8105a1710aa53e0769d1ab5dc0020e30333f53a63668d165627e24b3f3d25ff06ebff0041871776b2230fb79c8f09f02751aa1
- SSDEEP 393216:tS5BYpb5e90TQVaF4nIluXOFWblcAmIi8g2WIjf2d0GoPOtOoKpr:tS5Ib5c0T4aFsLbbmf8rN+dLIwKpr
- TLSH T1142723DF73B40014C18E0F3497AAA1D17A0A6D1713F0F97AAB3AF1C5ADB49C94A9D91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/NScurl.dll
- Size 6.0MB
- SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
- MD5 bf43de0fb8a2c38abcf7b1cf6be7e7ce
- SHA1 5c14855ddbf563da3bc14af40ea5650d627ab81d
- SHA512 145388afde1367253d723ea78501dfd61ebcfb17d440d324dbceb5d9b1c50dbd5a69946209722396f1d0f3699dc967bedab690dd670eedc9910b75a4e7d13830
- SSDEEP 196608:ohFz25oFKhmagHDetua42OOMoMy+Tgt/VqiWWO+ac88vdPkR:oXmSLTgtDqU
- TLSH T1DA563994FECB44F1E91384B0D8DBA37F9B349B118021D6BAFE4C5E56F933701252A25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt6Core.dll
- Size 5.8MB
- SHA256 fcdcc96d23d1f2f2585bc17125804d4d74de74c8bed20ce9d6ca348a14212c44
- MD5 f6618cdb7d96415a6e11558482e32bf8
- SHA1 03f07af673b9838c4c488c6091d878768934e654
- SHA512 656f77f2a2bbb5d0e1852efb7854a12f706854f94c6285c1d7542e760b4586f4f6558ec0968bae2422a11d2681408853f9feb84b9ff221f7512ab0c53724746c
- SSDEEP 49152:xk0ILGbaqhR9JaQsOkyGVMjHLBjALaZimO1xTpFY4hQ6/ZRZlm2/IGUgyp2hElHJ:Wopqpow14KOXKFdu9CwJsv6tJ42nW/3O
- TLSH T1CB567D1762F60055D8FAC039CB5B9503EAB3B8164321ABDF11A466096FB3BF5193F329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Qt6Core5Compat.dll
- Size 857KB
- SHA256 a599a8142e67a26599c04ae3c990eb6f86b42693da6d45509f9d2593367cbde8
- MD5 6d5c4f59ad95dd311840987d56808443
- SHA1 22ae3be5d472ebaa4d3452dbf4e2eef93aa2054f
- SHA512 f4dd18fd66156c006835dd77379ed45955b80d2f3c32f63b3dfaa03605105471df5d0b7802397ec3e1a58f196cd2aec3de6e828d4fbf42eb1d29bd232720d571
- SSDEEP 12288:WHqj2p2PzuV0RMj09aYtuoPGE/4717VKIHBDPzHkSoGGMf/jfUb235KAP:spmo0D9aY1G7VzDPTpnfL5zP
- TLSH T19115BE7771A80996F57BC03DCFA39813D7B67016136286EFAA6087067E63BF119BC211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Qt6Gui.dll
- Size 8.8MB
- SHA256 ef3b36aa58c41bdbeac8eeda14cfffb97c2db5165230489f2f9733a5255bf24f
- MD5 244c775000161dd8c34a08c4a477c73f
- SHA1 cf333ffb09ee833e555e9d33ab9b31f52d2aaaeb
- SHA512 8ee6f6bdee7d4e7f0385dd7f7b904445126839669a592b228b46f9692a94ff796072f4264d57aadfb92472e60a7a1de0a88675633eddd01cf2fc433eed805dda
- SSDEEP 98304:ol5Ps/ZcNv5BQSlQFY4Ozl0J5H9Z+yY7SWa0R7:bKv5B/6YHzl0Xd1WvR7
- TLSH T1D7968D57A2EA11D8C57BD13C8B9B9517E7B270050322DBEB12A48A552F33BF16A7F310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Qt6Network.dll
- Size 1.7MB
- SHA256 621fce49fb05297962844fe20355d26322cc340c354acb0bf1e032709c70e213
- MD5 b1113a4174aaa289ccbb199a45d6ab07
- SHA1 7a2b51c4c8832426fc8c72ed854e1aa5d7cba447
- SHA512 84c91b064a7f9e6a48d65f5436f931e61856bf58fa970204795431563f9a27bdabdf44e7875118f9a320feca73af9d4564b52b498779df7b5dcdfa6d4a995bd5
- SSDEEP 24576:oaUXxGp+iFgCJ//fihkcNP0uA1krG9l6zOkb8U:oaIGp+iFv/fihk0A1ZizOMd
- TLSH T1EE857D57A3A4429AD86EC13CC74B8A0BFA72700553669BDF02658E152F737F21B7E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Qt6NetworkAuth.dll
- Size 220KB
- SHA256 635db4989c285c77dc18227b8ebcdb661ad0cb72f088dab33b7a0e695c75cc51
- MD5 e001194ca2186c11c926418133f51444
- SHA1 cc7addee865eff8a1c597bb7d19a8a0b78340bb1
- SHA512 029b2d0bad8671e32a8cfe2b5b705266187235ded87269c6327f8d3a25a07f5ce983f4bfeeb1d945d0b112002ca05ea1999ceec2b1b76e748f2e5ad7f6f44214
- SSDEEP 6144:tzcyfnFUFCQGq4n6PrCYWnhPa9CThWSGT:pc+nnQVU6PmYOPt3GT
- TLSH T172241857B3A20292D42AC27DCA4B8A13F2B3B0505752DBEF45158BB91F637E1BE3D244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Qt6Svg.dll
- Size 514KB
- SHA256 ebf2fdd97cd098c7dfe9f4d68d0620a22f9a38f7f5faa943eb816b07c05af4a9
- MD5 eb9e66a05279c8d3dedc3f82a440d9df
- SHA1 7409a2f56313dd4999fc24f878b4242cbf0e7685
- SHA512 990798e0a48903bad7ec8cde195f5796d12239e3d64d9b3f9ece4d74b71f75ab4498c1cb59248171f9cace8970bd115fbdf1edcf125333539c64f9313d2f2d1b
- SSDEEP 6144:b0fAsIjASvwLAQWZ2PC10jGxLmtfCkxGG1BSmcSGc242vs7KTa4W2ca5UvdLT27:gX8AxAQW4PC1Fx6t3xGG1EmctcaOX27
- TLSH T16DB45C67F3A60786E46AD13CC75B8806EBB370040392DBEF856589542F23BE16A7F750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Qt6Widgets.dll
- Size 6.2MB
- SHA256 5aed2c3a8ff118747172631f9451ecb60651854ac9a90666e3b61c8454600770
- MD5 1fcc9650b4e10ac13b280dbb8a5f435e
- SHA1 d9bcac7bfa93682a8e917e450cb727754dfcc033
- SHA512 50a389adbac7bd51195f5cecafe948b2a699b6c98b0f8dbcad220580a580869959045a6625ed7f1db576fdf502b28ba062a3f91ff311f055359185baa102719b
- SSDEEP 98304:mOzWSqQcXhbbFtMhyFdt8veAG9EU7yTh0hyr2LwIVweL:/WSqQcXhb/MMnt8veAG9Egy1CSUii
- TLSH T149667C57A3AA0185C56BD23DCB5B8A17EBB2B0044322DBCF11A58E552F737E12E7E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Qt6Xml.dll
- Size 150KB
- SHA256 4f8391d3df3814aaf5876db76bef30e3f7f7754463055bb5aa996f33270f873c
- MD5 e12af43f95266cee6175097ef6fd8744
- SHA1 4dc205e417d41d546795f73cc6616f45ff3bdaa6
- SHA512 7d9b83711c62d3e3918f37ff6f8942605a6646903d301b94e2212926b6a553d278d102aebf6532483f0117c187a5da6a8cc9d9590955fca233b3a06dbe1fd06f
- SSDEEP 3072:o7W6ZoexdYqay9V99EOZvPIKoEOVkPXKR:oi6Zoexdx9EWTgkiR
- TLSH T1C6E33B8772A80286E4A6C238CE1B491AEBB3705157139FFF4255893A2F67FD26D7D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target iconengines/qsvgicon.dll
- Size 76KB
- SHA256 fad7b91d3dfc311e6713c9616eecf02f69d11ef6ee94e45b08623d4aa7f827aa
- MD5 04e1d1fec94098917b19a1159ff47193
- SHA1 3cd6f0171edfb371208750e166e9e8e090feafe0
- SHA512 6a66aac55303898cbc2f04e413f7a1d3f8947cac75d1b20a05a2a4adc7133bc050797b89e5301e683cb09ec732c5fbca8891e7539bf6b172178dd57f34f68088
- SSDEEP 1536:236D4u/Lxye8AlGr/HAltgy3/gm+nR9wdGblHTkxbdmbZgKxngGK:26DXdft9J+nRWdGblgxbdmbmKG
- TLSH T179734B532AA92229DCAACA3DC327C647EE7AF5107352AFDF025144326E237C16E75734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target imageformats/qgif.dll
- Size 46KB
- SHA256 466c595b87f59053de2957581b49104c4a2cdb2e7515e061d6c45cf6c24d17ab
- MD5 cfeb5a9ac4a431a763184b50aaf5244d
- SHA1 abd689ec12d04d62b2880138c71f8976a08166ec
- SHA512 935ab2b061973b931bdc13573d9df9f63d4bc96dd13afa566dddaa2484b25d2058a0d037a433e94eca45634d67bb902aa1fc395b5b8d28b6ea462f3973223d23
- SSDEEP 768:fbTuQPwX6wCIohpGt0U5DnEZZ36YLVBhW9ANgKxnVbGYJ9VANj:TTuQPtwXozLUaZ36YLVBhW9ANgKxngGQ
- TLSH T18B238D4A6BB541E4E5D7C238C1978A2BDBB5B670A743CBEF401185791E233D13E3872A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target imageformats/qicns.dll
- Size 53KB
- SHA256 185a84304287c558b6cf641e707257eec49560d9ae50307e02a7daa7ac8f8739
- MD5 487f07bc68c42c1f84341de31b81339e
- SHA1 bba2e85d1d659b58c1748e633b00be12230647fa
- SHA512 353db60802b59ae4af9fc6db789ad6c7949d331ab954448b2bd1492b05c4cb9fc4a1e005bba73a7fee4071a6d6128cc24cc7d7281f789742dc83b89d76e645a2
- SSDEEP 1536:yHvNVPC0oeEOwIDJ3XgUICrfVoY4eIOgKxngG0b:w1VPC0o0wIDJAUICrfVoY4eILKQb
- TLSH T1C7337C07A7A54391E5AAC638C6468233EB72F452A7839ADF0151C93D2E333E27D3D794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target imageformats/qico.dll
- Size 45KB
- SHA256 e85a0935ffa2a1bd5425ddbdc1035e8f90e8de2e26bd0a112f86a5895badcb86
- MD5 75641f83b9f6515b473e8a2c34f037bf
- SHA1 1e787105b2d3f7d573ea709e07ea998020abafb5
- SHA512 fcc91417babddf9f215d27cbdbee5afee32a74fef1da3a5f7c763316f80baf30dbe0e5031f24db8913f02f27a07516fc4d3947877827ab8752f7d3661f21e13c
- SSDEEP 768:pnYTPBPUkJ4R6tTpA/u2Lw9H3Jdu8l+rgKxnVbGYJ9SUNK:qP9UkJntKW2Lw9H3Jdu8l+rgKxngGu
- TLSH T139238C87A37902E1F5AAC63895478B23DAB1F160B713CBEF4122456A1D333E27E38745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target imageformats/qjpeg.dll
- Size 560KB
- SHA256 df30779fa1830475c7fbed9a7ca4c2a0e8f037c53ba4b08ff9b5658b1960b4c9
- MD5 14139af7cb55653167f0c021ef550419
- SHA1 af2794d2cb7e5784c37ac900988208e857e409e1
- SHA512 6f3e762a2f792fe89f7a052cf76e7d51ec7c528d12622b4aad93736d4610a41e60fc1dbf3053cdb8f2b0d9b0231de51469b55bce483f116dd704907157ef6cf1
- SSDEEP 6144:v+mVmz0nDiUQ1n+6Iq39kifk61daofCGzs+C9crsbc4SFSkG0wWTh/EDh5r3Sw14:vgnkSFSGgK1BxB2A
- TLSH T187C42942F6B51841C7E68838DF5AC956DB91781D03F68AF7B1D1CBE53B1BAA07A36300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target imageformats/qsvg.dll
- Size 38KB
- SHA256 5ce4e822a9ab127779ce33cbbd400d311192ec2e8d33f820fe0def27c8d03fe5
- MD5 31bb65616cb6bd7c14f7800ef35e4b0b
- SHA1 605451c1199d907f602d8d91d56d1e77aa39f475
- SHA512 404e49e4422334a5d585cdedcead10703a815ffaa771d32c0b1c53bba1e38fce01f251f0993f7abcaf2c7591fa029152032e040c4b68fe7ea678dd1c4cd4c2ea
- SSDEEP 768:mfVYvNicMKbKPZv8yYWDUgKxnVbGYJdtqNYw:l1ic1Kxv8yYWDUgKxngGRw
- TLSH T19C037C0B9B694A91F0AEC63895868B27D932F160A3838BCF1163427D5DB33D17D7C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target imageformats/qwbmp.dll
- Size 36KB
- SHA256 fa8dcb17cb14ab3df317e3b28754db985491703b6eb0704fa29b4414eb8252fa
- MD5 2d13adb190d04b71420f85b63ed1297c
- SHA1 f723111a66e54b2de44c11ddd21b9bff23c15f09
- SHA512 8ce429a8380e3ab5130baa55a794c3e51c5f3b7b2be12c0f5094777d89a107f22ace6bc5fa4a759ff36bc08b69cc0e0e8ae61f350dcbefc47b08baa8b583b64b
- SSDEEP 768:BIEc4E4MoX27naYOEyCqgKxnVbGYJdcNnjy:H5MoX27aYOEyCqgKxngGt
- TLSH T12AF26B6AA76A4292F6DBCB7984878A27CD75F270A703C3CF1162426E4C233D13D38356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target imageformats/qwebp.dll
- Size 538KB
- SHA256 923dcdd83563740f8c16e8aa8cfa394dc22f570fe64a407c534bdf2258902126
- MD5 596994bccbf0677a1656f5a7d5dcf032
- SHA1 7c4b9c48455280bd275ba8e1c5ee6b1dad897379
- SHA512 37000d69405ecdc0816c533bf33dbd1ee5d05978beedad49c2840d905759863478777b728284d45a217770e7bb3984abe694ebff08e319b72603a1cd628450b4
- SSDEEP 12288:0M7hNK2+2MLrLrLrLIvDao5bQPOo4Ejf29u3:0M7r0LrLrLrLIv2o5kmo4Ejf29u3
- TLSH T153C47C8ED59627D8E49BC0B889BDA21BF6A53C1C434185EB17D5B9293E33FC05637B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target jars/JavaCheck.jar
- Size 1KB
- SHA256 97d8249195a6b312c3d37c7138ea7fa0bb7d83c29f9a21a4bb34d221c9248dc6
- MD5 6b1ee511adf5cfd682822bf38d99985d
- SHA1 11c6228dc92a22af4fa29873247e086411c44381
- SHA512 78f4aa72baca82354a47e2caad6380785bac6b59475f8b2776f3efd561403f158d87c5b0ecc96f450396e72dcc4fff7c00a3bb660cd7782a38b93ee1f42c3295
- TLSH T1281135246DD8CC1CF30FBCF245669002A6798969421CB38B864162A6113AFD48E33CC3
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target jars/NewLaunch.jar
- Size 13KB
- SHA256 38d91b834e920482c8dddefead04b8ae51d7d88962009824b0a28414331047a2
- MD5 858b819511284ac200adef10070dde15
- SHA1 fc179476823a7c0e9f0c6a941602f5af66c4dce4
- SHA512 e2e1831be5c016be4befba355aff0e4b93439718f9f4b11f214057f33b5da9b328402590dd64e874b2fddb4e5d97e417bf4f2aa0e447e36acf9dacd2c7677c64
- SSDEEP 192:tMdN8foDNpAiTrrEKqlxOuocB4a8Gl+XR3XyvjjTuBBeGnht1NXwQ:KdN8AJpA2rBxcBFz8BeG8Q
- TLSH T13D526B29BDE1C929FA6B4BB8C4DA472BAC5949C45034703B0D705799E46C80CEF637D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target jars/NewLaunchLegacy.jar
- Size 23KB
- SHA256 f860d0e801cf1fb26e1d4404366d1062cfcc985d75a70a7bea68203cb8be824d
- MD5 1a523892e177bfe16217301cd0c0d0ad
- SHA1 60004294e46961ffae01ca5fb0693ca08eee842e
- SHA512 7862f18351af0e3ed1a4077c5d6fd3d53a7f20acb2edfef69ab82fd89b40f6f033358fdbef3636ba44dc8044c85c82b06cb7e3ccc6cd1ced7a2c965cc4373580
- SSDEEP 384:gKVL2YDeUfY8ON5lSEauJ1jy8Buc6gd9ry2TbRD/8SwWlQl:gKVMZlpJ1jpGy9m2T1D/8Sw2Ql
- TLSH T169B29F235E6AD451E05349BEC08EC32ADC998040907D247E2E7956B5FDACC6E7F07B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target platforms/qdirect2d.dll
- Size 965KB
- SHA256 99c1ba7861fbfa44d1b72bbee20dec5040d871b12ff19696b1c61c3ee5264655
- MD5 a170dc1b210adf6050f6cb28f1a259a4
- SHA1 61cbb97f8102f5c6b47eda9b51bd09969f08974e
- SHA512 1acffbf00587dfa29e9948ee33bf58e13dcbdc9a02c777f1f2b924c036e9c128952070993e6c9444a010efd075bd55345f28e60d5d401bea5783d5eea9b1b3ce
- SSDEEP 24576:YQQjGUW438BgTSjfv/afeOUbpO4pJz1R8:fQSz43ooSjfv/af/+M4pJ4
- TLSH T16D256E17A3E80295DC7FD13ECB9B8603D6B2709913A187CB4161CA097F337E22A79B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target platforms/qwindows.dll
- Size 892KB
- SHA256 f4a118afd9259cd928f55fa87f6fbc2cd88478e79bc75f4032d650b7e01e16aa
- MD5 9e9ede62dac5ed360ad811c409b96ec7
- SHA1 c7dc498254667728a31a2c6ebb0786708cc87e1d
- SHA512 0d6b56b68b045ffb31e5c7b81c1aaac78078a3f4dbd53cd569c1df350132bdd7031847573b204ab0a0b05d1695c986e8e79a5ef4617a75c5ecb9e12231606c3b
- SSDEEP 12288:X/EmzcV8bTMTDdTzBlbo6spEnhzUBM/PBR0vv05H5pJqzCz6zh:smgibTCfBlbo6spEnqy/cvvMH5TOzh
- TLSH T15D155C17A7A40285D47FC13DC78B8A13EBB2701113A29BCB4161CA597F377F22A7AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target prismlauncher.exe
- Size 10.1MB
- SHA256 31b0f905d39a8a693709749623ac02821bbd57421352cfca2de6b2c6716f9e30
- MD5 595e439fe3184c7f2e39f4d4307f192f
- SHA1 a05d41939d4fa40fd3c87b9c55907afbde72ec48
- SHA512 8672fefa8ebb6c67383c6799ab42a55047bf04dc1b8883bffe7f36d46bca734d8ce23f5c78ac20aacd49bfd60fe5269c683dfbfdc01c5659faaf843046d887aa
- SSDEEP 98304:6w2egZA13vv7UeTj+3JIHDno6TR/UNxOK6Ad4f4NIbWX8j3MSc2O:oegu5AKjW406CxgAd6qIbWsj3MSc2O
- TLSH T12FB69D5FB37502E0C539C138CB5E5952E272385743209AEB351EBDA6AF335E25E3CA18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target qt.conf
- Size 1B
- SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- MD5 7215ee9c7d9dc229d2921a40e899ec5f
- SHA1 b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA512 f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
- MD5 SHA1 SHA512
Score3/10 -
- Target qtlogging.ini
- Size 509B
- SHA256 ba15aee260e7ca1d48016546bab52fe30c3da264356b629739c125cd4eb3c700
- MD5 58967a7fcc8cd9d2bdb9b0fc24eed94d
- SHA1 b09f4ed1fe53850307cf8cb8cd2767524c26335b
- SHA512 5d44670d283b8a88892fd8def2fd2f2f9222d5115b25cc4b9e2b04a7c5f004930dc0b5e2d11ae128ab844f826ba079a0f93e17d5428355bdb4d21a04ee58055a
- TLSH T140F02788A9D724F429D61BD4DFEED033C0B030732E4E73B5ED258A29720C9883861D36
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target accounts.json
- Size 115B
- SHA256 74e4bd7ed38acc98292fcafaa081a90615390055024e81b93f0499aa070312b6
- MD5 91e4b8c61f1688c57c78eed9709678e7
- SHA1 dd9dac1e4bce97667da3ddc29658d4ef44a83070
- SHA512 9cd3c0508858ff675a229f54a39a54fe5aac19f8813afc55978f36e2eb7f9f0770cc5fe5bbbf54bd9bbc70c914cda54ea0961867bb4b20e77a7eb3180438ef6e
- TLSH T14BB092869613A47228EAB59940EA3025863052B7958D24AD20682020E3F5E660502746
- MD5 SHA1 SHA512 TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Accessibility Features
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Accessibility Features
1Defense Evasion
Modify Registry
2Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1