Overview

overview

10

Static

static

7

CSHacksFre...ks.exe

windows7-x64

1

CSHacksFre...ks.exe

windows10-2004-x64

1

Covid18.exe

windows7-x64

10

Covid18.exe

windows10-2004-x64

10

Covid20.exe

windows7-x64

7

Covid20.exe

windows10-2004-x64

7

Covid21 2.0.exe

windows7-x64

8

Covid21 2.0.exe

windows10-2004-x64

8

Covid666.exe

windows7-x64

Covid666.exe

windows10-2004-x64

CrazyPos.exe

windows7-x64

1

CrazyPos.exe

windows10-2004-x64

1

CrazyText.exe

windows7-x64

1

CrazyText.exe

windows10-2004-x64

1

Cronic.exe

windows7-x64

1

Cronic.exe

windows10-2004-x64

1

country.exe

windows7-x64

1

country.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    1563s
  • max time network
    1565s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    06-03-2024 18:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CrazyText.exe

  • Size

    576KB

  • MD5

    fbe1e739e7bad91059fa7f2d2847346d

  • SHA1

    648b0e40677df5c21dabb954a83f55a19d726b0c

  • SHA256

    6c653da84ec83702be65aa87884ff546e8d2b37846051e9dceec6a283306a823

  • SHA512

    3fbb7be6f365adb0e5e94d07418b5b4aad6d5b94a2c4b9cdc7ee78ed35b357f6a850672315f90f1a17e27210bc2365b4f69a7b4ae6a1143e205b507efc2e1896

  • SSDEEP

    6144:jnQbGwWj//EHZMdVOs2JLyK6z1wespJIK:7QyTj/kZwV4PeE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\CrazyText.exe
    "C:\Users\Admin\AppData\Local\Temp\CrazyText.exe"
    1⤵
      PID:2768

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2768-0-0x000000013FBE0000-0x000000013FCAC000-memory.dmp

      Filesize

      816KB

      Download