Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2023 13:01

General

  • Target

    CRABackup.exe

  • Size

    510KB

  • MD5

    e9ba5c96bce97b2f775576bf3987feb9

  • SHA1

    29fb8ceff9021b37e00b7bc4912b1a9af7a0ba1d

  • SHA256

    37dc758a392f09dfe1036563545f62f92a3170db0b47f0de54313342fd04df2c

  • SHA512

    590f496cd6daa8e35f2a94c448d31a709067f8e4e30b71de4a1187503f5483d5e2988c2553e6f5f4c9329ca36e787127755d407a9b472236aa0a748ca0146bc4

  • SSDEEP

    6144:pkwhWxwf3hEIQUCTqDZq8rF5ISCwPbitY8rDW+RDpGi7frgfuD5gopFm3:eWf3hVFBg4Fg28ri+RDpGi7frgmlF

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CRABackup.exe
    "C:\Users\Admin\AppData\Local\Temp\CRABackup.exe"
    1⤵
    • Drops file in Windows directory
    PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\daview.ini

    Filesize

    43B

    MD5

    f62435ab1ad700717edb451c0f5fca63

    SHA1

    e56bf0e8d44779ab44b81134e6133580f7d71ec5

    SHA256

    74d3476a6c6502654fb2177fa7a9194390b15fdf1e6c10248ae71aa6cb8ebf2a

    SHA512

    97b5ff23670eca3071d5e09fb7e85ff7c86aed6f79042fc6d57c11b466b8a8cb963781730183bbc864173be19b4b86f21dbbdb66f96aacea2439a16716f52118

  • C:\Windows\daview.ini

    Filesize

    70B

    MD5

    2882333cbb14e6620e8c624a39538cbf

    SHA1

    5557f39e6f62cd01020f2933b883b138ec75eddf

    SHA256

    1e2a8e1a96811e66f084b1f9ea0c41aa9ac07bb90d5ca258648fbe5e1b567c38

    SHA512

    31b11fddc808e6532a92a743709aedc7bad6ed0cd588e44bdc56a7730bbaeb71a850493a03864cc53de374357600a28a4f3c8975f515bd2aa76e62b9de410472

  • memory/2328-1-0x0000000073B20000-0x000000007420E000-memory.dmp

    Filesize

    6.9MB

  • memory/2328-0-0x00000000011F0000-0x0000000001273000-memory.dmp

    Filesize

    524KB

  • memory/2328-50-0x0000000004D60000-0x0000000004DA0000-memory.dmp

    Filesize

    256KB

  • memory/2328-54-0x0000000073B20000-0x000000007420E000-memory.dmp

    Filesize

    6.9MB