Overview

overview

8

Static

static

1

Krisp Crack.exe

windows7-x64

1

Krisp Crack.exe

windows10-2004-x64

1

Krisp_2.33.3.exe

windows7-x64

4

Krisp_2.33.3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Krisp v2.33.3.rar

  • Size

    273.5MB

  • Sample

    240219-tcszysfc6y

  • MD5

    e9811629db1bf31cec75c9b6ed8e368a

  • SHA1

    5ad337c5263f77714313a52741d06d3e66684710

  • SHA256

    c875ed5ec21a2d6ecc0b4dd7d6b35831eacb0d8e30787a510418831e45b1c7d2

  • SHA512

    5413b438bbae2419358b3f28def25d5f3359010fa6ba1acc6b9dc660bf103a0712a3f5908f0aa47688b144471cc64af62b8a4253967f3d68e2686206829260af

  • SSDEEP

    6291456:IDwCX+Qp0+Pqv5UiIP/Ou6C/KOFsmHPqviAZOF4OH9daQiFruxwnhYrFyco:IDx+QKOOjAKOFPMtoFvdda1FYpyco

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Krisp Crack.exe

    • Size

      98.6MB

    • MD5

      50bb586347a89f600d0bff814ae272e0

    • SHA1

      1280c10575945296efa87be5a688af10b95aba7e

    • SHA256

      2e02c296089d1da6341e926c3c3326bde2efdc2294e65c8c1d2e0e5198c9ccd4

    • SHA512

      581d8160d82f8dcbc10b6e964a485b23b5a689395bf8f47379380d5a1673729a5f48996ad985e25e5fd2dd480a084d6595daad51f5a4479d6019c6717ba30ff3

    • SSDEEP

      1572864:OfaRBn5sqyXOu6EjbECBEADViowszskz2faRBn5sqyXOu6EjbECBEADViowszskz:s/vXD6YIuOszskw/vXD6YIuOszsk

    Score
    1/10
    behavioral1behavioral2

    • Target

      Krisp_2.33.3.exe

    • Size

      210.3MB

    • MD5

      f22d5216419ab41a4e53569e114ee286

    • SHA1

      9ca62938be4865903ecc3f9f58ecc9734b5dff8b

    • SHA256

      67991ecfa602cd5162035a051bbc7ebafdc12990bf22246e4eb0cd0c4afaeeb1

    • SHA512

      0f239db9f21f48dc9c3097f8e374b8df953d45f6711229b58b40b60f0128fe7f2f186b63547cd0534403478b5f6b12341ee8b36083432cbc23da29d6b197e87b

    • SSDEEP

      6291456:NNBDepAq9WGUoxLddjhU9Be+w+TDVVoKWznz08wcMB:NLDepd0foxrji9BecsHMLB

    Score
    8/10
    discoverypersistence

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks