General
-
Target
MidnightCrack_v2.exe
-
Size
4.2MB
-
Sample
230802-tqgh3sfe52
-
MD5
5c18a8d56ea0fd1e3b3a7b86933ab52b
-
SHA1
8f80ccd3a5d5628d55cd1383e1b18b56d59fa93f
-
SHA256
11140156a04a4202a5f341336deed53e47b26ccc464fcdcc2c96e3f2561f8a4f
-
SHA512
afac01f99ffda7fe8170cf073e575b51c1791f3a7391313c3ef7f45cab519defe898954e570d28f9fc34a444f4cb9710940c364f41ae09944b48b89280571e79
-
SSDEEP
98304:7eCsDmTaFNjjHP5SWsaTdP3AxPi72JvoVRRH6l9EaBGiDVnRwwzUs:7COaFZRSWsQPQJvCvHm9EVi9RXU
Static task
static1
Behavioral task
behavioral1
Sample
MidnightCrack_v2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
MidnightCrack_v2.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
MidnightCrack_v2.exe
-
Size
4.2MB
-
MD5
5c18a8d56ea0fd1e3b3a7b86933ab52b
-
SHA1
8f80ccd3a5d5628d55cd1383e1b18b56d59fa93f
-
SHA256
11140156a04a4202a5f341336deed53e47b26ccc464fcdcc2c96e3f2561f8a4f
-
SHA512
afac01f99ffda7fe8170cf073e575b51c1791f3a7391313c3ef7f45cab519defe898954e570d28f9fc34a444f4cb9710940c364f41ae09944b48b89280571e79
-
SSDEEP
98304:7eCsDmTaFNjjHP5SWsaTdP3AxPi72JvoVRRH6l9EaBGiDVnRwwzUs:7COaFZRSWsQPQJvCvHm9EVi9RXU
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Stops running service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-