Overview
overview
7Static
static
3CrosshairX...rX.exe
windows7-x64
7CrosshairX...rX.exe
windows10-2004-x64
7CrosshairX...m.html
windows7-x64
1CrosshairX...m.html
windows10-2004-x64
1CrosshairX...47.dll
windows10-2004-x64
1CrosshairX...eg.dll
windows7-x64
1CrosshairX...eg.dll
windows10-2004-x64
1CrosshairX...GL.dll
windows7-x64
1CrosshairX...GL.dll
windows10-2004-x64
1CrosshairX...v2.dll
windows7-x64
1CrosshairX...v2.dll
windows10-2004-x64
1CrosshairX...de.ps1
windows7-x64
3CrosshairX...de.ps1
windows10-2004-x64
3CrosshairX...40.dll
windows7-x64
1CrosshairX...40.dll
windows10-2004-x64
1CrosshairX...40.dll
windows7-x64
1CrosshairX...40.dll
windows10-2004-x64
1CrosshairX...rt.dll
windows7-x64
1CrosshairX...rt.dll
windows10-2004-x64
1CrosshairX...40.dll
windows7-x64
1CrosshairX...40.dll
windows10-2004-x64
1CrosshairX..._1.dll
windows7-x64
1CrosshairX..._1.dll
windows10-2004-x64
1CrosshairX..._2.dll
windows7-x64
1CrosshairX..._2.dll
windows10-2004-x64
1CrosshairX...il.dll
windows7-x64
1CrosshairX...il.dll
windows10-2004-x64
1CrosshairX...il.dll
windows7-x64
1CrosshairX...il.dll
windows10-2004-x64
1CrosshairX...40.dll
windows7-x64
1CrosshairX...40.dll
windows10-2004-x64
1CrosshairX...40.dll
windows7-x64
1Analysis
-
max time kernel
117s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 11:59
Static task
static1
Behavioral task
behavioral1
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/CrosshairX.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral2
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/CrosshairX.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/LICENSES.chromium.html
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral4
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/LICENSES.chromium.html
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/d3dcompiler_47.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/ffmpeg.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral7
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/ffmpeg.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/libEGL.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral9
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/libEGL.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/libGLESv2.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral11
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/libGLESv2.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/locales/de.ps1
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral13
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/locales/de.ps1
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/dllsForJavascriptError/concrt140.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral15
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/dllsForJavascriptError/concrt140.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/concrt140.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral17
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/concrt140.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/cpgwinrt.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral19
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/cpgwinrt.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/msvcp140.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral21
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/msvcp140.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/msvcp140_1.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral23
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/msvcp140_1.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/msvcp140_2.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral25
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/msvcp140_2.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/buil.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral27
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/buil.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/buil.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral29
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/buil.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/vcamp140.dll
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral31
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/vcamp140.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/build/Release/vccorlib140.dll
Resource
win7-20240705-en
windows7-x64
General
-
Target
CrosshairX.v2024.07.03/CrosshairX.v2024.07.03/resources/app.asar.unpacked/node_modules/cpgwinrt/buil.dll
-
Size
19KB
-
MD5
40ab60d3dd13617c107c327d5492a970
-
SHA1
2c711f1a360011f5cf372bdfa1677c6573909bae
-
SHA256
8a7505b8bbc21598b85e3b5f4e8f8f8bc5fdb4b818c3d07f43a60564a86d25ec
-
SHA512
b0b69fce0375bf969808d8aa8b57a28546b392f46d5b7fc40074382e75f0c8b12263648202d496dab15d3d40d2e8c0d99a592754c68b3e3081045577843273da
-
SSDEEP
192:UCo6lWUp02Ux+xSxMxu8l3eQeWixaEW75W4GD5dHnhWgN7a4WJwWB1MvN/qnajus:SIp02y8MWiIEWYdHRN742/laEYa
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2228 wrote to memory of 2204 2228 rundll32.exe 31 PID 2228 wrote to memory of 2204 2228 rundll32.exe 31 PID 2228 wrote to memory of 2204 2228 rundll32.exe 31
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\CrosshairX.v2024.07.03\CrosshairX.v2024.07.03\resources\app.asar.unpacked\node_modules\cpgwinrt\buil.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2228 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2228 -s 802⤵PID:2204
-