Overview
overview
10Static
static
3Craft_Rise...23.rar
windows10-2004-x64
7Craft_Rise...23.rar
windows11-21h2-x64
3Craft_Rise...er.exe
windows10-2004-x64
10Craft_Rise...er.exe
windows11-21h2-x64
10Craft_Rise...23.exe
windows10-2004-x64
1Craft_Rise...23.exe
windows11-21h2-x64
1Craft_Rise...13.exe
windows10-2004-x64
1Craft_Rise...13.exe
windows11-21h2-x64
1General
- Target Craft_Rise_Hack_Cheat_V1.17.23.rar
- Size 1.6MB
- Sample240122-x7dejadbb7
- SHA256 5b3dc5017ab4178e6a056c61ef8e205982bcfa7b7fd8854b82fd4e9aa9d0274d
- MD5 93a2d291f97442a59b72fec4f2476e10
- SHA1 1dfd92db8cff0ab3bcc890f5dd1e543db3964076
- SHA512 9f837546b148f192ec8e0ac4daecc4e628642536aacb70e682f7676cd7488f114273ae5995d022a636712974f91087c8f672ee10eaa26debba01224986a5f191
- SSDEEP 24576:vsf6bNAHs5p9R0bHgCibGt5CdPRpafJsTsO97qHmYbvrPsr2XWY1DKx:/bqH+pEs9KfvRgL9eGDamYS
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Craft_Rise_Hack_Cheat_V1.17.23.rar
Resource
win10v2004-20231222-en
Behavioral task
behavioral2
Sample
Craft_Rise_Hack_Cheat_V1.17.23.rar
Resource
win11-20231215-en
Behavioral task
behavioral3
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe
Resource
win11-20231215-en
Behavioral task
behavioral5
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral6
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe
Resource
win11-20231215-en
Behavioral task
behavioral7
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral8
Sample
Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.exe
Resource
win11-20231215-en
Malware Config
Extracted
-
quasar
-
1.4.1
-
Office04
-
139.180.171.110:22766
-
559c79bc-4c64-4106-a5ab-e40703620b71
-
encryption_key
9C52BAC3CB66706D47E06069A5809DE8E12F205F
-
install_name
System32.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
System32
-
subdirectory
SubDir
Targets
-
- Target Craft_Rise_Hack_Cheat_V1.17.23.rar
- Size 1.6MB
- SHA256 5b3dc5017ab4178e6a056c61ef8e205982bcfa7b7fd8854b82fd4e9aa9d0274d
- MD5 93a2d291f97442a59b72fec4f2476e10
- SHA1 1dfd92db8cff0ab3bcc890f5dd1e543db3964076
- SHA512 9f837546b148f192ec8e0ac4daecc4e628642536aacb70e682f7676cd7488f114273ae5995d022a636712974f91087c8f672ee10eaa26debba01224986a5f191
- SSDEEP 24576:vsf6bNAHs5p9R0bHgCibGt5CdPRpafJsTsO97qHmYbvrPsr2XWY1DKx:/bqH+pEs9KfvRgL9eGDamYS
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Cheacker.exe
- Size 1.5MB
- SHA256 def9ca51ee50b3e34df194b618b5db125712facd64dc4f9ab52d4044348ce36e
- MD5 9bf7de62505839e62d84095f16e5f67a
- SHA1 543612808cd9e7369007f06f9f57548614b8b320
- SHA512 1c50c9947f8d8cbea90acf0ba1e3ef222b135574513f9f12143e761e1f1346cbb2d29a30d17c9ab2b66b79949419bbdcd8b1053ad8702d2e81642a7ce29d43dd
- SSDEEP 24576:jEKdAe4q1cdYlqS5wjlq0cnHFl0oegbCmjZiwLGlaLPR7i+lRx+dCxOvuw7G3tHG:7dAK8SuY0cnHH0oVTjBClYpOyRxPy7GQ
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
- Target Craft_Rise_Hack_Cheat_V1.17.23/Craft_Rise_Hack_Cheat_V1.17.23.exe
- Size 146KB
- SHA256 5fd835db939307a0c43d18c702804d50c3ea5ea124f1e714edb82fa6ccaba214
- MD5 37c8a9cc5370e6aff4ee7253a8c4ae53
- SHA1 7c458906cbbe5c40aea13bf63d616e9c35dfc1cf
- SHA512 3922097d78fe2a7a661c8dd78fca1a9fabe3c1dba0e17563c4589128440ffbb3db7ef09ffd3666aac268a9988325aa47e39b346e8570662f3668170c1e692fcd
- SSDEEP 3072:wczkitvo4BpYN/6mBPry8TXROLdW5m4mURs9OOGX0kx:wA4NCmBPry/N24OOC
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Craft_Rise_Hack_Cheat_V1.17.23/Valo_Cheat_V1.89.413.dll
- Size 10KB
- SHA256 eb33cace01b6bb8503f06a83279e6d231bbc4cb0751838758fa4dfe379105c31
- MD5 fc45f8e0af0dedc6b7b86cedf5b015ee
- SHA1 efd99167513215c83c07937fe92f6976cd605fd6
- SHA512 bd5a9bf002731b26098df714b29aa73cb8b5dc822bec0cea4dedc4c31eced5312700664923deacf869035e6f47e5217af1d76ed99b37bfe6c76d83729bbbd5c9
- SSDEEP 192:up5Fwkz0BBdIamzTxzw8iSxks3rLrV1r9Nr8ZYJo/DhzbdF1Oz:VgHrVtr8Zqo/DxbdO
- MD5 SHA1 SHA512 SSDEEP
Score1/10