0d900cb2be48cef95db3dbe86221d8d1007ba294b963ee580c2293c6be37f07a

Resubmissions

02/03/2024, 17:29

240302-v2y3yafh788

02/03/2024, 17:24

240302-vysrrafh3810

02/03/2024, 17:22

240302-vxn26sfd2110

Sharing

Copy URL Twitter E-mail

General

Target
crazyCore.exe
Size 15.0MB
Sample240302-v2y3yafh78
SHA256 0d900cb2be48cef95db3dbe86221d8d1007ba294b963ee580c2293c6be37f07a
MD5 3e69eb9b5ab82999bdc78d6232917e2f
SHA1 3516807c3f86bfb9298cfb9840dacbff99fb8f48
SHA512 f0f0f3dc549d989e710b3db10674629adaed4291e700f38fdcfa52ab4847a02aecf63fbc0197a747fae2ca997a6a6e8ed454e58e83ebbdae20cb30d01810de9e
SSDEEP 49152:celaraJaKaoCNpHWuZkYZ+RYkwhtzLjxI8LbX154Kx3bvQQz5RrlD1ZNyWO1MO9U:v3W
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  crazyCore.exe
- Size 15.0MB
- SHA256 0d900cb2be48cef95db3dbe86221d8d1007ba294b963ee580c2293c6be37f07a
- MD5 3e69eb9b5ab82999bdc78d6232917e2f
- SHA1 3516807c3f86bfb9298cfb9840dacbff99fb8f48
- SHA512 f0f0f3dc549d989e710b3db10674629adaed4291e700f38fdcfa52ab4847a02aecf63fbc0197a747fae2ca997a6a6e8ed454e58e83ebbdae20cb30d01810de9e
- SSDEEP 49152:celaraJaKaoCNpHWuZkYZ+RYkwhtzLjxI8LbX154Kx3bvQQz5RrlD1ZNyWO1MO9U:v3W
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery evasion persistence trojan
- Downloads MZ/PE file
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
- Checks system information in the registry
  System information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Sets file execution options in registry

Executes dropped EXE

Loads dropped DLL

Registers COM server for autorun

Checks installed software on the system

Checks whether UAC is enabled

Checks system information in the registry

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2