Overview
overview
7Static
static
3Crazy Erro...er.exe
windows7-x64
7Crazy Erro...er.exe
windows10-2004-x64
7Python.Runtime.dll
windows7-x64
1Python.Runtime.dll
windows10-2004-x64
1VCRUNTIME140.dll
windows7-x64
3VCRUNTIME140.dll
windows10-2004-x64
3_asyncio.dll
windows7-x64
3_asyncio.dll
windows10-2004-x64
3_bz2.dll
windows7-x64
3_bz2.dll
windows10-2004-x64
3_ctypes.dll
windows7-x64
3_ctypes.dll
windows10-2004-x64
3_decimal.dll
windows7-x64
3_decimal.dll
windows10-2004-x64
3_elementtree.dll
windows7-x64
3_elementtree.dll
windows10-2004-x64
3_hashlib.dll
windows7-x64
3_hashlib.dll
windows10-2004-x64
3_lzma.dll
windows7-x64
3_lzma.dll
windows10-2004-x64
3_multiprocessing.dll
windows7-x64
3_multiprocessing.dll
windows10-2004-x64
3_overlapped.dll
windows7-x64
3_overlapped.dll
windows10-2004-x64
3_queue.dll
windows7-x64
3_queue.dll
windows10-2004-x64
3_ssl.dll
windows7-x64
3_ssl.dll
windows10-2004-x64
3_testcapi.dll
windows7-x64
3_testcapi.dll
windows10-2004-x64
3_tkinter.dll
windows7-x64
3_tkinter.dll
windows10-2004-x64
3Analysis
- max time kernel
144s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
29/08/2024, 01:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Crazy Error V2 Installer.exe
Resource
win7-20240705-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Crazy Error V2 Installer.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Python.Runtime.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Python.Runtime.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
VCRUNTIME140.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
VCRUNTIME140.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
_asyncio.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
_asyncio.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
_bz2.dll
Resource
win7-20240729-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
_bz2.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
_ctypes.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
_ctypes.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
_decimal.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
_decimal.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
_elementtree.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
_elementtree.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
_hashlib.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
_hashlib.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
_lzma.dll
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
_lzma.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
_multiprocessing.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
_multiprocessing.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
_overlapped.dll
Resource
win7-20240705-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
_overlapped.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
_queue.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
_queue.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
_ssl.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
_ssl.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
_testcapi.dll
Resource
win7-20240708-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
_testcapi.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
_tkinter.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
_tkinter.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target Crazy Error V2 Installer.exe
- Size 36.6MB
- Sample240829-b8pcjaxfkh
- SHA256 a3a264617e3ef583f7a8e9747ad08da7c5e831ee25eb597543512ae32ddf628c
- MD5 88b35804fb768542a8020f370ee2bbf5
- SHA1 5410e4d9fd812e6dd2470bff060e88c65f5e8c4a
- SHA512 0a95f3e6154b8421d83b1e09f39edc07ebacb651dcf07ce64418c72ef60fe0d77d5570daea959818059ce66f1783f304dc2f8f56b2a2fbf69d8e0745fa1cca75
- SSDEEP 786432:hTkzYE5THTYjifPkJhvxrbWEPV9ILkbF/4t7Zh9fUUMgOqvO+kT6B:hTkcQTzYNbvRWEt9PbQh9fUFqW+ko
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 4804 crazererrer.exe - Loads dropped DLL 46 IoCs
pid Process 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe 4804 crazererrer.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Crazy Error V2\lib\tk\safetk.tcl Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\msgs\he.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Atka Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Asia\Baku Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Etc\GMT+5 Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Europe\Budapest Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\demos\nl.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\demos\square Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Poland Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\encoding\gb2312-raw.enc Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Africa\Abidjan Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Ojinaga Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Pangnirtung Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\St_Vincent Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\demos\ttkmenu.tcl Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\libopenblas.SVHFG5YE3RK3Z27NVFUDAPL2O3W6IMXW.gfortran-win32.dll Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Sitka Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Antarctica\Rothera Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\obsolete.tcl Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\demos\images\noletter.xbm Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\msgs\es_ec.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Edmonton Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Lima Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Asia\Barnaul Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\unsupported.tcl Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\api-ms-win-crt-environment-l1-1-0.dll Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Africa\Malabo Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Asia\Yekaterinburg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Canada\Central Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\msgs\fo.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Pacific\Fakaofo Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\encoding\cp1256.enc Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\US\Mountain Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\icons.tcl Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Guatemala Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\msgs\es_ve.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tclIndex Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Europe\Chisinau Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\msgs\ru.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\msgs\eu.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Argentina\Mendoza Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Asia\Sakhalin Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Pacific\Kwajalein Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\US\Indiana-Starke Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\ttk\winTheme.tcl Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\msgs\es_py.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Europe\Bucharest Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Santarem Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Asia\Almaty Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Europe\Zaporozhye Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tk\demos\clrpick.tcl Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Costa_Rica Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Antarctica\Macquarie Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Asia\Nicosia Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Chicago Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\MET Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\America\Mendoza Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Asia\Seoul Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Australia\LHI Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Australia\West Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\tzdata\Pacific\Easter Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\msgs\zh_tw.msg Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\numpy.linalg._umath_linalg.pyd Crazy Error V2 Installer.exe File created C:\Program Files (x86)\Crazy Error V2\lib\tcl\encoding\koi8-u.enc Crazy Error V2 Installer.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Crazy Error V2 Installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language crazererrer.exe - Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: 33 1064 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 1064 AUDIODG.EXE Token: 33 4804 crazererrer.exe Token: SeIncBasePriorityPrivilege 4804 crazererrer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Crazy Error V2 Installer.exe"C:\Users\Admin\AppData\Local\Temp\Crazy Error V2 Installer.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:3040
-
C:\Program Files (x86)\Crazy Error V2\crazererrer.exe"C:\Program Files (x86)\Crazy Error V2\crazererrer.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:4804
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x48c 0x2fc1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1064
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Crazy Error V2\VCRUNTIME140.dll
- Size 84KB
- SHA256 1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
- MD5 ae96651cfbd18991d186a029cbecb30c
- SHA1 18df8af1022b5cb188e3ee98ac5b4da24ac9c526
- SHA512 42a58c17f63cf0d404896d3b4bb16b2c9270cc2192aa4c9be265ed3970dfc2a4115e1db08f35c39e403b4c918be4ed7d19d2e2e015cb06b33d26a6c6521556e7
- SSDEEP 1536:RPwKQRaeU5QsPWFP/wPENm2eK7oJnoUSgpAY8ODcDcm7cIs+4ecbV6iVBoA2r:RwKQRbU5P4XwPENm2eK7mnoUSgpAY8Oa
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\_bz2.pyd
- Size 72KB
- SHA256 f2eaab5894a666556a6ec0f7b430deb30cdcdb534e822cda8c789435d3834535
- MD5 7f8dc5e22155dfaeeee837bee907f960
- SHA1 9d03bd1120fd67cb4a2a6e42707c3ecc95d56a31
- SHA512 ac4ae9f88dbebdd6619be62252275260f476bec5765644de279dadf9f10437ebec526d833fbaae70686de1ef65fc574659191c2c8050df96b7ff7ff3fb51f80c
- SSDEEP 1536:uHi3lVNW+yen/syxiC8b4dUL7BIh4Vxg4yGr:TlnJ6t1b4dUL7BIh4Vxbr
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\_ctypes.pyd
- Size 109KB
- SHA256 497cf76470349d3cb601e1fe66c8e08f7570cfb0d25e15c3d94aae84280dba58
- MD5 e7f1c92338eb9964ea5922de823abcb8
- SHA1 ae5719b87f4f6b3cdaacd6e43f5bf101e492adc0
- SHA512 0fe48e6c7596c226d031a1c2966270589b939b54a316e44856054a933be052d5084afc4c1a9d8314aa1cf0e15cc777747645741f3efea3016a41248c01d8fc14
- SSDEEP 3072:I4w6dPcswtJq50s/+5e+we8/9IhVPhKqo1:nd0Mt/+5eZe6qC
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\_decimal.pyd
- Size 219KB
- SHA256 d4554bdf86c188e97eaacae305223678262138c7569cfbb9837990efd6255e77
- MD5 44ccf7ff70b92fdc6c843c68d1dd66e4
- SHA1 82176fc8bb776ecaf0957f7051f789b02f196024
- SHA512 75f50c42a46c47a67714807e8702d5b23db36b7445f44fb53aa75aa737331f988c6ddf088d4f8194e64f365473d52d54abb8c739280396e1f2501879a6a1bd27
- SSDEEP 6144:oaueleQ7Alat004ppuq6xV3XMW5g3ZGwVSqrq:oaueleWbOCqGWSqrq
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\_hashlib.pyd
- Size 36KB
- SHA256 b54e3474472fd318e0d94b9115238dca43c457e6253f06f92d2604df14d8247d
- MD5 13e5639aa1732db7f8fd9c2820cced10
- SHA1 5f9799b1a16bbdb337766b42b9828f8da1f55e75
- SHA512 f4abc90e5f6ea1b204265e91f22978ca8eb04c8ce9bef5d558becadb1b6116c769d7e3401b9396438c85f5decf88b79fd8114f6054541228c753494660a949d1
- SSDEEP 768:4VKNA5Ae3iOei9FK5Y8TjUI0uJO2vo5IhsI7SUWDG4ys7aM:gKNA5A2iOeivK5YmxdJtw5IhsIiys7R
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\_lzma.pyd
- Size 181KB
- SHA256 ee4f276ec7f0b34acd38361023173d6113d97a7de17d28a4fbbd286fe5ce2f28
- MD5 b1abe0da66ec97e4aff97f1bd5203434
- SHA1 c3bd39814c4f01b57a442da50ed515e7dfd05a8a
- SHA512 47556e4c65aa04853520c92fdb1f88bb03ab7f4478bfc60e15186f6109cf659e68d458a7b1090a063a0f771c6eb835582464a646456d9e7f82534854c74f83b0
- SSDEEP 3072:tez7m1+Dj2ykm6e+gyd1uBSsPc5S/BPkG23pS17tvtjVNgGoY+7l1/3gOi7atzHo:8zDj2ykm6e+hd1uB1D+7zg5s1YO+RR0E
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\_socket.pyd
- Size 67KB
- SHA256 9cb6bb684c2d475c60a94d3f789cae6e662901ea408e18ac4bc34cba0baffeed
- MD5 6f71a76bb3c8da44c671f23b4b78f901
- SHA1 444e2d7d167dbe387317a1f52396c9ccab40ee49
- SHA512 f1346f5f83717218d1d2517c022d69cb246ff01d88cbf72443b6b06545eef2fe1ff77859e2a87915fc55925847777d1721abc7085a0d81226b3356916b8871eb
- SSDEEP 1536:6UwhhIEOD0EClMD9f8+LeJN/H+ljc9IhVwdsVFyD:HwjED0VMD9f8ueJN/HOjc9IhVwT
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\_tkinter.pyd
- Size 58KB
- SHA256 1a2394e295252bcef3ebfe88d8633e833d172c9e4fbcc6657e16094c91d3a041
- MD5 f5fa0ed3dea125649c4c01326c41c617
- SHA1 a8f734dd18c963ea24f655223230bf6d5a71a1f6
- SHA512 016f2046437f3f1c35784b4960becfee9b15f03c79580fde159bc1a287b0e73adaae6de381550602f06f5557e9553a39da86adf236d2ad3bb4bc9e7d8bcb32ed
- SSDEEP 1536:XEwQVilHrnTYzYHYwHC9boV6hchM1AJx5IhsSdSHDXJy9:X2EoYFhM1AJx5IhsSd4Dg
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\crazererrer.exe
- Size 71KB
- SHA256 1b2255aed8e8b890ea0d42318c7367c9788ffe9764ea44ec640044c4e5d1bea4
- MD5 5178838b2c8cc727b9fc4c378fbd1ba8
- SHA1 ed8959ece54717f260ae30502341a30bc52caa26
- SHA512 6469f293dffdcb9e1ccffbae9b912909ba903c3b7c3367029c1b1c72be6810f0ba2e8b0c15ce3f5a460244aaefbd2b6a44c688a6a2806bafcefe4407650bf7ca
- SSDEEP 1536:HJnkRJLmfT6BRnVtyk5csfrfXUY/m+FdgmnAgLgTNLA:HCRJLmfTydri
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\libcrypto-1_1.dll
- Size 2.1MB
- SHA256 541adbc9654d967491d11359a0e4ad4972d2bd25f260476dd7576c576478698a
- MD5 67c1ea1b655dbb8989a55e146761c202
- SHA1 aecc6573b0e28f59ea8fdd01191621dda6f228ed
- SHA512 1c7612c03df85b596dc360c1a94e367d8bfba51f651b49c598e4a066a693d9aa74195a40cc849ef787eac9b6e1e1fc079b389c03fc539e53abf4aa729bef5893
- SSDEEP 49152:ipcZNnBRQlSvWk8we42f1CPwDv3uFZjV0:uqND6Nk802f1CPwDv3uFZj
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\libffi-7.dll
- Size 28KB
- SHA256 0c7ec6de19c246a23756b8550e6178ac2394b1093e96d0f43789124149486f57
- MD5 bc20614744ebf4c2b8acd28d1fe54174
- SHA1 665c0acc404e13a69800fae94efd69a41bdda901
- SHA512 0c473e7070c72d85ae098d208b8d128b50574abebba874dda2a7408aea2aabc6c4b9018801416670af91548c471b7dd5a709a7b17e3358b053c37433665d3f6b
- SSDEEP 384:l69PtXvz8cLBN3gHhY4AFlfIvDzqig2c2LuRRClfW23JLURlV5uH+6nYPLxDG4yG:l65tXvz2CTIvy2c26A35qYvWDG4yG
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\libopenblas.SVHFG5YE3RK3Z27NVFUDAPL2O3W6IMXW.gfortran-win32.dll
- Size 26.5MB
- SHA256 c785898392f5570ba6d8223c3e8db6a99160a5d2dd52bf89a1a53b0144e9a955
- MD5 356c73b41d0eef7f9a2b0e2734a14dee
- SHA1 e0a6c5bc3f4e9129c76f61132d8705974955db6c
- SHA512 105dd043d7a74b53af0b5a721a4ac64f58a4665d679b2e1d295f4880991660e0053a667d7feddb80c7ca2ede78ee46982850c18a8ff047c910ab9833eede46de
- SSDEEP 196608:TRue8dz3qhi4UWP79o376lYjSwdyupktgOCM7FF:tue8dz6hibWPx/Ymw0btgK7FF
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\library.zip
- Size 9.7MB
- SHA256 aa6e100ecae3bfb97178b7125a83add4032862efbbe1ab783cac3b5da6f8532c
- MD5 9b82eb9a774780767f3b8e7ec7487f6f
- SHA1 da9dca672632a01ba558066d6c7fe59f27d11ac1
- SHA512 03386d846b8a843c62218558fbda362ae295c65be87edee1add7fd13c3ac4480d621fc70de49d6180c85a2d292f125dc8fbdd50e32d010a742a4ebb53ccb91cc
- SSDEEP 98304:D+yWMMwid1IKbKpe39+1JteS+bfDdSvpDv7M0CcwddyaK:yjwirIKke3990Ccwdd8
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.core._multiarray_tests.pyd
- Size 101KB
- SHA256 1c55dc007e653ca772fc2fff55c50cd3e96ae1213089a0f908211e87dec18ac4
- MD5 41e7188f5db2243d49f92a3f30b0953f
- SHA1 b075f8b929988d7c543ef6048f4076bc97aafd9b
- SHA512 4d41f95ec787ec861cc3747943af49ff3c16c9b05de31358f31c0714cf7f51b5ec0dbdf04fdb513a77f3e09342903267977f1c45a382f46eab67bf16148a90f6
- SSDEEP 3072:lB1BLmzSfCWD0UMmgDzbqYHfD9WbO2S5KWuvIE9s5UiUiW0YNvlaeFbOiHXQXrhl:bs5UMmWioRWyX+0Yrb7HglH
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.core._multiarray_umath.pyd
- Size 2.1MB
- SHA256 d84a35ff9270fb144b0e9e015434db5e727b17cc831a1d3af90398c83d9bd21e
- MD5 a231bc6e45d2ac828e4652470d6ff0a6
- SHA1 1107ffc3501df0260bf92a5bddf2aa1e0b8fb435
- SHA512 8c76b2f4a9c4e6338227fa71ad7bdb026ea5c3eaad78497835d4a16847df2c42c3f5145b9c2fb2b510157191f35418eea66ea41d9548779bf199a2c3c1caa94e
- SSDEEP 49152:wVI0QLZ1mg3C+jWE5gYrWqoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqDqqqqqqqqqqJ:x1mg1WEKYrP
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.fft._pocketfft_internal.pyd
- Size 71KB
- SHA256 d20437fefd572e45a6ba512339c9c9782951966d733dced53b7ea4e2ac93586d
- MD5 4a854d639dfa9f8284f6885437490ccc
- SHA1 43d831799c84dfbb78d16151e9cfaee91eacddb9
- SHA512 b9a8bbdf81d7fa886937a332367bb85786790018746ad9918f526fef498e2dabdaaec38ae81b99633d57c549c55bcdc7cbdb321e48007a993fe98b509419f8a9
- SSDEEP 1536:mMJ3BkL3hNf45nrFfTgeWVZygz26ere22VrL2A6Y5KG80PkB2mNMr89:c7f45nrRTkVsgz26eC22B8Be89
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.linalg._umath_linalg.pyd
- Size 105KB
- SHA256 db218aa77c9e90fdb599fe747ffb20faa4d1bbfa0d47c9f4a19d17526f4bb623
- MD5 9b31a4ea8120789223330010123785cf
- SHA1 fffc08c9b1801e9bb481e62b20fa1bfd4639a28f
- SHA512 67b3a0da39cf768e79fb92a745bb5b26691c3337a975869970f1a41731eea81d7fc7c79fb3ace438b7ebc2a373162341884247eef5f8b046a9bf8dc92b6dab7c
- SSDEEP 3072:iNG66E9QEfdJA5AR7oB1BW+4XI9e7Vmbl0aq0T4eUxwi/FuMmhjS4SgQqmXN1A0E:iV7jKoVmaoCxR9HgZmXzAeHGyJoFe0+
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.linalg.lapack_lite.pyd
- Size 15KB
- SHA256 ccd64b7c9a697aaeab5f82a2287a0eca17cb249e69b320653d59c845f81781a1
- MD5 e31fb05024c9212862fc936bd8de0d08
- SHA1 c26769d73100969d6baa188406870396b87e8a02
- SHA512 b5024bf300e361e0b15294dd343ea70572d60c3711ffbb51ec79f7f5e2f2da1c1373ee430ba7d6457a4466e426ec5a0a0aa1b002040b93b5c53eaaacc1efcd6c
- SSDEEP 384:5mhXv6B8I5kOciDk2xr52mmE+rKBBeTeJr5n2993WoRz:5mtq8I5k3iDk2VYw+rKKTeBB2Pm
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._bit_generator.pyd
- Size 139KB
- SHA256 eec38aa31773ee5b324b262c259cf022d77660f5c5b8437c9f1e5518ca508052
- MD5 12383888c3add9155761bbc399952065
- SHA1 3fdb546d72b2ee01a290ec59a563dc40953cf16a
- SHA512 35f87300d1169b5f61c0036ea6a2e2296bcccbf61cd4b89b7f5e63ff7bd9b61fd441f7be8e66b2cd0cc6d8fa82626a6b2c28188ab8861f7d9a20142455500286
- SSDEEP 3072:WfhB0bV9A5a3+Fq1/UExle9Zg22+WarahxP0dtp01Cqmm2+Warah0SI:WYbH7+9Zg22+WarahV0dQ19mm2+WaraI
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._bounded_integers.pyd
- Size 292KB
- SHA256 a2d757ec6250fca7cfcc239a6011893b3cd0491ccb55b9d02895801aba00afba
- MD5 a92773a1ea3996210f5c176a7a52eda9
- SHA1 0531610f6ab4bcc7800459acaf67987114395a5c
- SHA512 3d4aafab656bde4162890893d5606881c222fd2061ffeea19e268a025158ae186a4870a98ef1263b0db91d4541dbb98048011271b8688cf1e71bca0c987c580d
- SSDEEP 3072:VczZD/J8pwPseMarFq6Lr3DYmrK5vrO1TxVtzALMMvNsGy:V6B8pwqas4fECTx/0MMOG
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._common.pyd
- Size 176KB
- SHA256 64820b551662676c48df483c40e2d57a10c508677a2585f40d016c9152429584
- MD5 176621a13008464699b6bb6d6a65b477
- SHA1 fbb8ef796d8375aec4c79c88358ffd000e909ada
- SHA512 e3f43ac2951b2e7b7f81085688af6cba759663d663b693e9084a8ae733b03b976ccc6992991ca1034040471ca3a40f8d001fcf157981e1ffffa1ce1a1e6025ee
- SSDEEP 1536:h7YgkJ4qg3rehgZYX2oyV6Ki8fWnKPiw3drU2lazLZ/Up9EpuWzdi3NjY0dIh5Cr:E1eAkEGN9WzsdIh5CrN3hH/Cm
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._generator.pyd
- Size 611KB
- SHA256 cbbef3e6765d718f7a29ea07bd0a0457d3ebdfa6b9ba8c9c1b7ee0e4e8dead41
- MD5 3bd70c7dd22f5453bbcdb075401d7ef5
- SHA1 662714478d64c047440a7363c375bee397697ff6
- SHA512 a144a612dae86ed19f470172099acf2f14132b2d98574cac9d78d1d06cb54591927c0bdfdc27e85500f601ac40925f1ef143a16ee1b7c325737b80d361a7747f
- SSDEEP 6144:VC962JXTgS0STLjTRUfYyRkYM8EmKLSGSiSDSxw5S5WXSMo5SlSwnS/jS/SlSoiR:Vw16FUzQKqKGmOaL6aEsV/QIWHvMmv
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._mt19937.pyd
- Size 85KB
- SHA256 1bc1838e9a37d3987d2def1193b2fa9ef845fdfb5f88f4f58a0c4615f905b364
- MD5 eafc505766223a622ffe92268e14cf63
- SHA1 3fa5682d286781626b00dad91436137c0ad6afce
- SHA512 9dba895e60815175aa4e008a25156e332bef4cfc11c0e43836aac03e9c7ac165090b9e76fece7958d102eb1e6bccc280a858541e43cf2c6e94943e680aedc07e
- SSDEEP 768:lWgVFkHHzblP1Cf2IGvqd8z7P8Eh8nNPyvFFvaA9LWBV8ljMTdS1iX+6:MgvkHH/N1Ct/dLlyNFvv9wVYiX
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._pcg64.pyd
- Size 63KB
- SHA256 2ed800a391165bdb59cea2cf44b882ea3da100af83958755c7cbaf7c9d254996
- MD5 a875c42940cf4b12a98d75062b2ac0d3
- SHA1 a6639b873d92366fa4f833079c4993380625cc32
- SHA512 2e5bbd5aab7cc2af14c8c26029ef06dc18aa6b137e428454491bc0eaabfe72af2d2989a6d3cbfcc0d25e930fd1ed23a0d2a1c22a75a223e4f162c8613d408616
- SSDEEP 1536:0wLkUXy/JcR+kWy/XDBDTWBvA6BjnBL9wz:U/JcR+pAXBTWB46RBm
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._philox.pyd
- Size 65KB
- SHA256 a6628b990f8c9ed6c6278f8c19b17209f0a3b4adc1e1780fa8a47196d9779e60
- MD5 727e60e5a9f6c0f808494fb760a8156e
- SHA1 829e9d7f79812d4b62aea25e460b47fe2095f1c0
- SHA512 8b48e4f9d3abad5ad151ccdb386fce07eb8dd25767424ded3458c15abb334855bdb84356a57930940c2ea6193a39c592ead184d83e4eb2f5cfdd62b964dcceee
- SSDEEP 768:YqW8aktGUFZgRjtB+ICdAs/gscoTSQ7AW7TAosLpPBh8iiBZCEq7u6w3FMGki0:NWPktG1pnvYb1sThdLu6H4
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random._sfc64.pyd
- Size 46KB
- SHA256 a7eed17abd88f84e5143205dbe11cbe2f9e3cbaee486fb55e97a04273d93f4ed
- MD5 babe221eb8014bbdcb27b4bdcf606f72
- SHA1 3da8654276f78bc56ee52845d87b72d75b2c69e4
- SHA512 81dba8b8a25556679866813c02642e95f18d1670b6f354c2713c922a5e974c7b4bc4b68a0930091b49030c377148275e92217081f67f49557ab185d059851ad5
- SSDEEP 768:i6yzek518YEAY8CjrathvPSM+ct3aNlXwN3K0QLotBB8vagL1aKuNM:ryKk51zEP/ElptqNlXwZzQaB1uQNM
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\numpy.random.mtrand.pyd
- Size 539KB
- SHA256 211082e254715f6b7d1a5622499f19bea7d3597a0cfe220ea2507401b99c4824
- MD5 035c4152a3015d6b5e772f1b7d6a622f
- SHA1 127905f98246779ace2e417ec8b738dc96d64f31
- SHA512 2ace7e1c69f8912cf020ef3b557e57fd7729468d04e98d54a2ff76be07c38144a21c7a83e92824341ef5f7120f2cd604f2537c20a0d3ab6a6af6dd4cc9cbec87
- SSDEEP 6144:8jMfuVvfA0M5BmWhxX3H8Vo6fSqSNSPwFSAWASO53SiSmv3Sx0ShSNSkS4ShSESi:WVX+tX3H8V5AdwQKCDV/4tlgy8rGG
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\pyexpat.pyd
- Size 163KB
- SHA256 642647882cec9886010fda0a17039e1fc3b90a1fde615fdf1889889bc95879db
- MD5 2bf4ce1cd01721117aa139d6fc5d090d
- SHA1 c4d4031b673ed33e0d2be6ad15fd71805481968f
- SHA512 96fe73300b034037dbb5beb136b3890378bbbc267cccffc2ebdf7b09c754ede4f734e61680944f12da70784474307bbe59e9dcea15bfc26ce67196eecd5eb43c
- SSDEEP 3072:0HxSHo2eFJhFN1dKj4VN+CfuUsdKFJK2SpSqccb9IhVhlhTTE:wSHxuhFN+a+6sdKS2SRccbb
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\python38.dll
- Size 3.7MB
- SHA256 6e7ed993131a5beb3b96736320bafb83a063d3043015bf2b14eea6601a414ab8
- MD5 97d893cd2879f8e9a6bc8a35d203b2f4
- SHA1 68ddf1e3a98e080c4ef2c9d241a31dee6aec240b
- SHA512 30804c88389b54a6119c7c134af315330afb234d743b51acbb25f11d2aec3400c7498e918294f4497e49ebf7ddac557509847d785d58fe9cd381a3fbf8eb9378
- SSDEEP 49152:1Jo3hNFuzLiyXzcJKF+pKvBNRQpHkqK2RhU6KGI5IqHuDFMZnwP06VTk7K+Lu7a/:jJXzcJKNQpHdvm5jHupMZ/6Zaugb
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\select.pyd
- Size 23KB
- SHA256 3f177ee6d35f0dbeb0f0719f4e20404abe6a101c375ab6d27fcd28aa846def2c
- MD5 e6969a95ca8b62725206ebef19af0371
- SHA1 60bfcad0dd79267793c3b8ff109a98c4201ffc18
- SHA512 ae45e272f4b0207dc8720681932641b53379a8b4d1ee7c878ce7804cc475069812d8dcd8689dc6383911b51af272801dbce6b076aaf60f5287c2bacbce8d95e6
- SSDEEP 384:OEaiqWpcF9e9e3TJDfOqI1etPyO5xuE9IhqGXHnYPLxDG4y88tyrl:zavP96wTVfOqDtKOGE9IhqGXHWDG4ymZ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\tcl86t.dll
- Size 1.3MB
- SHA256 e79443e9413ba9a4442ca7db8ee91a920e61ac2fb55be10a6ab9a9c81f646dbb
- MD5 30195aa599dd12ac2567de0815ade5e6
- SHA1 aa2597d43c64554156ae7cdb362c284ec19668a7
- SHA512 2373b31d15b39ba950c5dea4505c3eaa2952363d3a9bd7ae84e5ea38245320be8f862dba9e9ad32f6b5a1436b353b3fb07e684b7695724a01b30f5ac7ba56e99
- SSDEEP 24576:WKtPdKQ4rlSyFuExQlFwDjdIUhe6mf2iId7UlyKWUCAqBkmIqzS/w+Tds2YxJQ0h:3PdRhUBlKlRtqt9+TSMzi9
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\tk86t.dll
- Size 1.1MB
- SHA256 19f70dc79994e46d3e1ef6be352f5933866de5736d761faa8839204136916b3f
- MD5 6cadec733f5be72697d7112860a0905b
- SHA1 6a6beeef3b1bb7c85c63f4a3410e673fce73f50d
- SHA512 e6b3e52968c79d4bd700652c1f2ebd0366b492fcda4e05fc8b198791d1169b20f89b85ec69cefa7e099d06a78bf77ff9c3274905667f0c94071f47bafad46d79
- SSDEEP 24576:sJI8MkBaMq104jq+QOtaHex6jXcT6Qvy8a48BbUfS0dvjcANkQvgL+Tm4Kp:BhqOtarL8M8fBjcPQvgL5Z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Crazy Error V2\win32api.pyd
- Size 101KB
- SHA256 8e7e968d9292e726a289105eb1991d6f3664e9702d521b68a23d49b7826bc565
- MD5 e2bd243023df53c409a804884afc2948
- SHA1 eadd808af885497f456559161692aa074a314ebd
- SHA512 efffa7778da61991fda3e5ce7682a94faafee44a26d49c86510976b4d3df8e7e4fe66233a48c32fe3b898191e72a2aa3e1e1f987329c242a68c1fec4a82976e7
- SSDEEP 3072:4yRJPyT/9lmB5LDoH7iFhL4m5cTh6rmrGtPvX0mept9:Y/9lohL4WcTh6rp1X0meJ
- MD5 SHA1 SHA512 SSDEEP