Static task
static1
Behavioral task
behavioral1
Sample
Crysis_Trn.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Crysis_Trn.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
www.mogelpower.de.url
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
www.mogelpower.de.url
Resource
win10v2004-20231215-en
General
-
Target
7f2c2363fd2b61e10f2e0e2fd4ed5b8f
-
Size
30KB
-
MD5
7f2c2363fd2b61e10f2e0e2fd4ed5b8f
-
SHA1
7e32065d2e524f3d4ff2674790d99fa0542397ac
-
SHA256
37f329d8e8e12c6ae7c911eaf4aa8a1bfba00580e88eda08312e84e80181477e
-
SHA512
219b9f4ab280b82c93dce9e055c79f14aef846a37dd557f205a596acd244e1ae00a8746ab99de90c1be83641a45f3b9f89e380dc47a82260ada6f9c435efd505
-
SSDEEP
768:v4ei7RiQXWooRw03Efr2AA5Wfx6JqHOjmYnuQwK9+AmNBApGW4gqM8:v8Ri0oW03sr2AAAx6Jk7quQwKWN8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Crysis_Trn.exe
Files
-
7f2c2363fd2b61e10f2e0e2fd4ed5b8f.zip
-
Crysis_Trn.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
eXtalia.nfo
-
www.mogelpower.de.url