General
-
Target
CR-78-Installer-Windows-x64.exe
-
Size
29.9MB
-
Sample
240520-1rjhdsgh39
-
MD5
7bb52891dd07909091461daa20ff4282
-
SHA1
6e208661d82a4cab2138d69e4211b093012a9ace
-
SHA256
cd2e2d27b22c27f4c16b36810239efa237553ae359d0acaf25c19b14de19af51
-
SHA512
a99c8ce5b726acacd8e655f0a270324081e08f945341463c9837bd051f39719868caa2e36f6af7939056631e3f47f08820386329d5da07b62b4c26a64d38d607
-
SSDEEP
393216:+qaU4ooTxpAgV+OV9lmDFnwIAZxGY8CLBTbAjs8zqWxJKl11xmIc9mD:gyORsj9iBTbz8zXxJb9
Static task
static1
Behavioral task
behavioral1
Sample
CR-78-Installer-Windows-x64.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
CR-78-Installer-Windows-x64.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
CR-78-Installer-Windows-x64.exe
-
Size
29.9MB
-
MD5
7bb52891dd07909091461daa20ff4282
-
SHA1
6e208661d82a4cab2138d69e4211b093012a9ace
-
SHA256
cd2e2d27b22c27f4c16b36810239efa237553ae359d0acaf25c19b14de19af51
-
SHA512
a99c8ce5b726acacd8e655f0a270324081e08f945341463c9837bd051f39719868caa2e36f6af7939056631e3f47f08820386329d5da07b62b4c26a64d38d607
-
SSDEEP
393216:+qaU4ooTxpAgV+OV9lmDFnwIAZxGY8CLBTbAjs8zqWxJKl11xmIc9mD:gyORsj9iBTbz8zXxJb9
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-