8cd54b6dbc71d61bb3a86a983335f578efb46c866840a9a651a9b2b41384eb61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CraftHack Red Editio.exe
Size

5.2MB
Sample

240521-vfnp3scc45
MD5

a11c40d51108c7eaedaeedb5d1e3490a
SHA1

737a3a0b66e0a327df5b5c0726d6338be716f4f8
SHA256

8cd54b6dbc71d61bb3a86a983335f578efb46c866840a9a651a9b2b41384eb61
SHA512

5d5b8a01152a7148e1ccf0656a9788b7aa8e7fe676319984561aa424ba4a4585777695993e20c147287521bf719bc81dde00cac14268b066d146a2d26a3c8f93
SSDEEP

98304:usYy5KD4gxwCzosc1hSeIKuTPkKf4LW98CzAOaKRqoDs5:uPpxJzXcPaKuTx4LE8CzAf2JDK

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  CraftHack Red Editio.exe
- Size
  
  5.2MB
- MD5
  
  a11c40d51108c7eaedaeedb5d1e3490a
- SHA1
  
  737a3a0b66e0a327df5b5c0726d6338be716f4f8
- SHA256
  
  8cd54b6dbc71d61bb3a86a983335f578efb46c866840a9a651a9b2b41384eb61
- SHA512
  
  5d5b8a01152a7148e1ccf0656a9788b7aa8e7fe676319984561aa424ba4a4585777695993e20c147287521bf719bc81dde00cac14268b066d146a2d26a3c8f93
- SSDEEP
  
  98304:usYy5KD4gxwCzosc1hSeIKuTPkKf4LW98CzAOaKRqoDs5:uPpxJzXcPaKuTx4LE8CzAf2JDK
Score

7^/10

persistence
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1