4d6dbeba848f5727ab4d9295fc5e5e2c3f287a9950ad5479ce88be4a888e2757 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

crazyCore.exe
Size

8.6MB
Sample

240523-n1n31sfd44
MD5

5245c7ab0c998313bade154469cdc5a9
SHA1

47641f1c4e8ae5b9e99c7dd03217c1947a22c152
SHA256

4d6dbeba848f5727ab4d9295fc5e5e2c3f287a9950ad5479ce88be4a888e2757
SHA512

6775b625c692be0d98d0c419d37c88ae9ebe9e6e536873958e083e40035fb6fda80f8b246bb80e822aa00a9e1c996318e21cf0cdffacd1dc4ed948ff2f5bc6f3
SSDEEP

49152:vaMgaH2bmMjbwsd8CCvpX4AjerBV1RphcNwhIF/7MoxYivZcuLH/vpJBXnyh:M

Score

10^/10

evasion execution persistence trojan

Malware Config

Targets

- Target
  
  crazyCore.exe
- Size
  
  8.6MB
- MD5
  
  5245c7ab0c998313bade154469cdc5a9
- SHA1
  
  47641f1c4e8ae5b9e99c7dd03217c1947a22c152
- SHA256
  
  4d6dbeba848f5727ab4d9295fc5e5e2c3f287a9950ad5479ce88be4a888e2757
- SHA512
  
  6775b625c692be0d98d0c419d37c88ae9ebe9e6e536873958e083e40035fb6fda80f8b246bb80e822aa00a9e1c996318e21cf0cdffacd1dc4ed948ff2f5bc6f3
- SSDEEP
  
  49152:vaMgaH2bmMjbwsd8CCvpX4AjerBV1RphcNwhIF/7MoxYivZcuLH/vpJBXnyh:M
Score

10^/10

evasion execution persistence trojan
- Modifies WinLogon for persistence
  persistence
- Modifies Windows Defender notification settings
  evasion trojan
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

evasionexecutionpersistencetrojan