Overview
overview
8Static
static
30 Crypter .exe
windows10-2004-x64
12012 Crypter.exe
windows10-2004-x64
1DeadLine's...er.exe
windows10-2004-x64
3EOF Data Saver.exe
windows10-2004-x64
1Grieve Cry...-1.exe
windows10-2004-x64
6Grieve Cry...12.exe
windows10-2004-x64
6HA CRYPTO V1.0.exe
windows10-2004-x64
1High Life Crypter.exe
windows10-2004-x64
1Illusi0n Crypter.exe
windows10-2004-x64
1Infinity C...v2.exe
windows10-2004-x64
1MoonCrypter.exe
windows10-2004-x64
1Private Crypt.exe
windows10-2004-x64
1Psomasweb_...-1.exe
windows10-2004-x64
1Psomasweb_...er.exe
windows10-2004-x64
1Quest Crypter.exe
windows10-2004-x64
1Saddam Crypter.exe
windows10-2004-x64
1The DarKne...er.exe
windows10-2004-x64
1TripleX-Crypter.exe
windows10-2004-x64
1ZMini.exe
windows10-2004-x64
6ZeroBountv1.0.exe
windows10-2004-x64
1Zeus Crypter.exe
windows10-2004-x64
7no$crypter.exe
windows10-2004-x64
8Analysis
-
max time kernel
73s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system -
submitted
26/06/2023, 21:48
Static task
static1
Behavioral task
behavioral1
Sample
0 Crypter .exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral2
Sample
2012 Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
DeadLine's Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral4
Sample
EOF Data Saver.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral5
Sample
Grieve Crypter 2012-1.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral6
Sample
Grieve Crypter 2012.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral7
Sample
HA CRYPTO V1.0.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral8
Sample
High Life Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral9
Sample
Illusi0n Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral10
Sample
Infinity Crypter v2.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral11
Sample
MoonCrypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral12
Sample
Private Crypt.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral13
Sample
Psomasweb_Public_Rinajel_Crypter-1.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral14
Sample
Psomasweb_Public_Rinajel_Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral15
Sample
Quest Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral16
Sample
Saddam Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral17
Sample
The DarKness binDer.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral18
Sample
TripleX-Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral19
Sample
ZMini.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral20
Sample
ZeroBountv1.0.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral21
Sample
Zeus Crypter.exe
Resource
win10v2004-20230621-en
Behavioral task
behavioral22
Sample
no$crypter.exe
Resource
win10v2004-20230621-en
General
-
Target
MoonCrypter.exe
-
Size
253KB
-
MD5
0ec3da715b4dd0c38c00d5102dbcc6c6
-
SHA1
8f94bdd39e48e894d01cc418059288ab0b9fd7ce
-
SHA256
cd24da6a58712ffa1c42790226d2dbcbd4a223e14d001c97e4031170d3ef6a99
-
SHA512
a3b9aff7c374accb0d079104bbf73889c8b0c9c14cbabbf97265048c944efb89cc5b9340fab8e80607e8863d32cec6908d01d079414c4bc69a09301485464232
-
SSDEEP
3072:/kTP5ZkDO0Yb95ks/sptHfLOcHiCeiRHfdhTW4ks/sptHfLO:YRZkoQBtDDQBtD
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 4920 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4920 AUDIODG.EXE