Overview

overview

10

Static

static

3

CrackLauncher.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    CrackLauncher.exe

  • Size

    7.6MB

  • Sample

    240718-3wjp3asgrp

  • MD5

    12da4767668c79431f4d9ef02c14e03f

  • SHA1

    a3feafda54636aa9bd65e6f835a9b315681b4628

  • SHA256

    cda3e3a0d7cd5c56a919ca7e92de3892c516b26ce15356e3816dc2261540ba43

  • SHA512

    6b9f48517b47666ab0b2c4ad4ed7ad42f6b63248b5aa31c9aae2c70fb969d12583cf4a9f4df760e18bb4eaf91d4db63c1bf3e17d08a69e41f82866c92e424dd1

  • SSDEEP

    196608:s/wre0o4gkeS1EFLdG55bFW3maHzKMIF+0/V:s/wre0o7FLQLbY3maHzLU+0/V

Score
10/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      CrackLauncher.exe

    • Size

      7.6MB

    • MD5

      12da4767668c79431f4d9ef02c14e03f

    • SHA1

      a3feafda54636aa9bd65e6f835a9b315681b4628

    • SHA256

      cda3e3a0d7cd5c56a919ca7e92de3892c516b26ce15356e3816dc2261540ba43

    • SHA512

      6b9f48517b47666ab0b2c4ad4ed7ad42f6b63248b5aa31c9aae2c70fb969d12583cf4a9f4df760e18bb4eaf91d4db63c1bf3e17d08a69e41f82866c92e424dd1

    • SSDEEP

      196608:s/wre0o4gkeS1EFLdG55bFW3maHzKMIF+0/V:s/wre0o7FLQLbY3maHzLU+0/V

    Score
    10/10
    persistenceprivilege_escalation

    • Modifies WinLogon for persistence

      persistence

    • Downloads MZ/PE file

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks