Analysis
-
max time kernel
144s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29-08-2024 01:49
General
-
Target
Crazy Error V2 Installer.exe
-
Size
36.6MB
-
MD5
88b35804fb768542a8020f370ee2bbf5
-
SHA1
5410e4d9fd812e6dd2470bff060e88c65f5e8c4a
-
SHA256
a3a264617e3ef583f7a8e9747ad08da7c5e831ee25eb597543512ae32ddf628c
-
SHA512
0a95f3e6154b8421d83b1e09f39edc07ebacb651dcf07ce64418c72ef60fe0d77d5570daea959818059ce66f1783f304dc2f8f56b2a2fbf69d8e0745fa1cca75
-
SSDEEP
786432:hTkzYE5THTYjifPkJhvxrbWEPV9ILkbF/4t7Zh9fUUMgOqvO+kT6B:hTkcQTzYNbvRWEt9PbQh9fUFqW+ko
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 46 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Crazy Error V2 Installer.exe"C:\Users\Admin\AppData\Local\Temp\Crazy Error V2 Installer.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
-
C:\Program Files (x86)\Crazy Error V2\crazererrer.exe"C:\Program Files (x86)\Crazy Error V2\crazererrer.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x48c 0x2fc1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
MD5ae96651cfbd18991d186a029cbecb30c
SHA118df8af1022b5cb188e3ee98ac5b4da24ac9c526
SHA2561b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
SHA51242a58c17f63cf0d404896d3b4bb16b2c9270cc2192aa4c9be265ed3970dfc2a4115e1db08f35c39e403b4c918be4ed7d19d2e2e015cb06b33d26a6c6521556e7
-
Filesize
72KB
MD57f8dc5e22155dfaeeee837bee907f960
SHA19d03bd1120fd67cb4a2a6e42707c3ecc95d56a31
SHA256f2eaab5894a666556a6ec0f7b430deb30cdcdb534e822cda8c789435d3834535
SHA512ac4ae9f88dbebdd6619be62252275260f476bec5765644de279dadf9f10437ebec526d833fbaae70686de1ef65fc574659191c2c8050df96b7ff7ff3fb51f80c
-
Filesize
109KB
MD5e7f1c92338eb9964ea5922de823abcb8
SHA1ae5719b87f4f6b3cdaacd6e43f5bf101e492adc0
SHA256497cf76470349d3cb601e1fe66c8e08f7570cfb0d25e15c3d94aae84280dba58
SHA5120fe48e6c7596c226d031a1c2966270589b939b54a316e44856054a933be052d5084afc4c1a9d8314aa1cf0e15cc777747645741f3efea3016a41248c01d8fc14
-
Filesize
219KB
MD544ccf7ff70b92fdc6c843c68d1dd66e4
SHA182176fc8bb776ecaf0957f7051f789b02f196024
SHA256d4554bdf86c188e97eaacae305223678262138c7569cfbb9837990efd6255e77
SHA51275f50c42a46c47a67714807e8702d5b23db36b7445f44fb53aa75aa737331f988c6ddf088d4f8194e64f365473d52d54abb8c739280396e1f2501879a6a1bd27
-
Filesize
36KB
MD513e5639aa1732db7f8fd9c2820cced10
SHA15f9799b1a16bbdb337766b42b9828f8da1f55e75
SHA256b54e3474472fd318e0d94b9115238dca43c457e6253f06f92d2604df14d8247d
SHA512f4abc90e5f6ea1b204265e91f22978ca8eb04c8ce9bef5d558becadb1b6116c769d7e3401b9396438c85f5decf88b79fd8114f6054541228c753494660a949d1
-
Filesize
181KB
MD5b1abe0da66ec97e4aff97f1bd5203434
SHA1c3bd39814c4f01b57a442da50ed515e7dfd05a8a
SHA256ee4f276ec7f0b34acd38361023173d6113d97a7de17d28a4fbbd286fe5ce2f28
SHA51247556e4c65aa04853520c92fdb1f88bb03ab7f4478bfc60e15186f6109cf659e68d458a7b1090a063a0f771c6eb835582464a646456d9e7f82534854c74f83b0
-
Filesize
67KB
MD56f71a76bb3c8da44c671f23b4b78f901
SHA1444e2d7d167dbe387317a1f52396c9ccab40ee49
SHA2569cb6bb684c2d475c60a94d3f789cae6e662901ea408e18ac4bc34cba0baffeed
SHA512f1346f5f83717218d1d2517c022d69cb246ff01d88cbf72443b6b06545eef2fe1ff77859e2a87915fc55925847777d1721abc7085a0d81226b3356916b8871eb
-
Filesize
58KB
MD5f5fa0ed3dea125649c4c01326c41c617
SHA1a8f734dd18c963ea24f655223230bf6d5a71a1f6
SHA2561a2394e295252bcef3ebfe88d8633e833d172c9e4fbcc6657e16094c91d3a041
SHA512016f2046437f3f1c35784b4960becfee9b15f03c79580fde159bc1a287b0e73adaae6de381550602f06f5557e9553a39da86adf236d2ad3bb4bc9e7d8bcb32ed
-
Filesize
71KB
MD55178838b2c8cc727b9fc4c378fbd1ba8
SHA1ed8959ece54717f260ae30502341a30bc52caa26
SHA2561b2255aed8e8b890ea0d42318c7367c9788ffe9764ea44ec640044c4e5d1bea4
SHA5126469f293dffdcb9e1ccffbae9b912909ba903c3b7c3367029c1b1c72be6810f0ba2e8b0c15ce3f5a460244aaefbd2b6a44c688a6a2806bafcefe4407650bf7ca
-
Filesize
2.1MB
MD567c1ea1b655dbb8989a55e146761c202
SHA1aecc6573b0e28f59ea8fdd01191621dda6f228ed
SHA256541adbc9654d967491d11359a0e4ad4972d2bd25f260476dd7576c576478698a
SHA5121c7612c03df85b596dc360c1a94e367d8bfba51f651b49c598e4a066a693d9aa74195a40cc849ef787eac9b6e1e1fc079b389c03fc539e53abf4aa729bef5893
-
Filesize
28KB
MD5bc20614744ebf4c2b8acd28d1fe54174
SHA1665c0acc404e13a69800fae94efd69a41bdda901
SHA2560c7ec6de19c246a23756b8550e6178ac2394b1093e96d0f43789124149486f57
SHA5120c473e7070c72d85ae098d208b8d128b50574abebba874dda2a7408aea2aabc6c4b9018801416670af91548c471b7dd5a709a7b17e3358b053c37433665d3f6b
-
Filesize
26.5MB
MD5356c73b41d0eef7f9a2b0e2734a14dee
SHA1e0a6c5bc3f4e9129c76f61132d8705974955db6c
SHA256c785898392f5570ba6d8223c3e8db6a99160a5d2dd52bf89a1a53b0144e9a955
SHA512105dd043d7a74b53af0b5a721a4ac64f58a4665d679b2e1d295f4880991660e0053a667d7feddb80c7ca2ede78ee46982850c18a8ff047c910ab9833eede46de
-
Filesize
9.7MB
MD59b82eb9a774780767f3b8e7ec7487f6f
SHA1da9dca672632a01ba558066d6c7fe59f27d11ac1
SHA256aa6e100ecae3bfb97178b7125a83add4032862efbbe1ab783cac3b5da6f8532c
SHA51203386d846b8a843c62218558fbda362ae295c65be87edee1add7fd13c3ac4480d621fc70de49d6180c85a2d292f125dc8fbdd50e32d010a742a4ebb53ccb91cc
-
Filesize
101KB
MD541e7188f5db2243d49f92a3f30b0953f
SHA1b075f8b929988d7c543ef6048f4076bc97aafd9b
SHA2561c55dc007e653ca772fc2fff55c50cd3e96ae1213089a0f908211e87dec18ac4
SHA5124d41f95ec787ec861cc3747943af49ff3c16c9b05de31358f31c0714cf7f51b5ec0dbdf04fdb513a77f3e09342903267977f1c45a382f46eab67bf16148a90f6
-
Filesize
2.1MB
MD5a231bc6e45d2ac828e4652470d6ff0a6
SHA11107ffc3501df0260bf92a5bddf2aa1e0b8fb435
SHA256d84a35ff9270fb144b0e9e015434db5e727b17cc831a1d3af90398c83d9bd21e
SHA5128c76b2f4a9c4e6338227fa71ad7bdb026ea5c3eaad78497835d4a16847df2c42c3f5145b9c2fb2b510157191f35418eea66ea41d9548779bf199a2c3c1caa94e
-
Filesize
71KB
MD54a854d639dfa9f8284f6885437490ccc
SHA143d831799c84dfbb78d16151e9cfaee91eacddb9
SHA256d20437fefd572e45a6ba512339c9c9782951966d733dced53b7ea4e2ac93586d
SHA512b9a8bbdf81d7fa886937a332367bb85786790018746ad9918f526fef498e2dabdaaec38ae81b99633d57c549c55bcdc7cbdb321e48007a993fe98b509419f8a9
-
Filesize
105KB
MD59b31a4ea8120789223330010123785cf
SHA1fffc08c9b1801e9bb481e62b20fa1bfd4639a28f
SHA256db218aa77c9e90fdb599fe747ffb20faa4d1bbfa0d47c9f4a19d17526f4bb623
SHA51267b3a0da39cf768e79fb92a745bb5b26691c3337a975869970f1a41731eea81d7fc7c79fb3ace438b7ebc2a373162341884247eef5f8b046a9bf8dc92b6dab7c
-
Filesize
15KB
MD5e31fb05024c9212862fc936bd8de0d08
SHA1c26769d73100969d6baa188406870396b87e8a02
SHA256ccd64b7c9a697aaeab5f82a2287a0eca17cb249e69b320653d59c845f81781a1
SHA512b5024bf300e361e0b15294dd343ea70572d60c3711ffbb51ec79f7f5e2f2da1c1373ee430ba7d6457a4466e426ec5a0a0aa1b002040b93b5c53eaaacc1efcd6c
-
Filesize
139KB
MD512383888c3add9155761bbc399952065
SHA13fdb546d72b2ee01a290ec59a563dc40953cf16a
SHA256eec38aa31773ee5b324b262c259cf022d77660f5c5b8437c9f1e5518ca508052
SHA51235f87300d1169b5f61c0036ea6a2e2296bcccbf61cd4b89b7f5e63ff7bd9b61fd441f7be8e66b2cd0cc6d8fa82626a6b2c28188ab8861f7d9a20142455500286
-
Filesize
292KB
MD5a92773a1ea3996210f5c176a7a52eda9
SHA10531610f6ab4bcc7800459acaf67987114395a5c
SHA256a2d757ec6250fca7cfcc239a6011893b3cd0491ccb55b9d02895801aba00afba
SHA5123d4aafab656bde4162890893d5606881c222fd2061ffeea19e268a025158ae186a4870a98ef1263b0db91d4541dbb98048011271b8688cf1e71bca0c987c580d
-
Filesize
176KB
MD5176621a13008464699b6bb6d6a65b477
SHA1fbb8ef796d8375aec4c79c88358ffd000e909ada
SHA25664820b551662676c48df483c40e2d57a10c508677a2585f40d016c9152429584
SHA512e3f43ac2951b2e7b7f81085688af6cba759663d663b693e9084a8ae733b03b976ccc6992991ca1034040471ca3a40f8d001fcf157981e1ffffa1ce1a1e6025ee
-
Filesize
611KB
MD53bd70c7dd22f5453bbcdb075401d7ef5
SHA1662714478d64c047440a7363c375bee397697ff6
SHA256cbbef3e6765d718f7a29ea07bd0a0457d3ebdfa6b9ba8c9c1b7ee0e4e8dead41
SHA512a144a612dae86ed19f470172099acf2f14132b2d98574cac9d78d1d06cb54591927c0bdfdc27e85500f601ac40925f1ef143a16ee1b7c325737b80d361a7747f
-
Filesize
85KB
MD5eafc505766223a622ffe92268e14cf63
SHA13fa5682d286781626b00dad91436137c0ad6afce
SHA2561bc1838e9a37d3987d2def1193b2fa9ef845fdfb5f88f4f58a0c4615f905b364
SHA5129dba895e60815175aa4e008a25156e332bef4cfc11c0e43836aac03e9c7ac165090b9e76fece7958d102eb1e6bccc280a858541e43cf2c6e94943e680aedc07e
-
Filesize
63KB
MD5a875c42940cf4b12a98d75062b2ac0d3
SHA1a6639b873d92366fa4f833079c4993380625cc32
SHA2562ed800a391165bdb59cea2cf44b882ea3da100af83958755c7cbaf7c9d254996
SHA5122e5bbd5aab7cc2af14c8c26029ef06dc18aa6b137e428454491bc0eaabfe72af2d2989a6d3cbfcc0d25e930fd1ed23a0d2a1c22a75a223e4f162c8613d408616
-
Filesize
65KB
MD5727e60e5a9f6c0f808494fb760a8156e
SHA1829e9d7f79812d4b62aea25e460b47fe2095f1c0
SHA256a6628b990f8c9ed6c6278f8c19b17209f0a3b4adc1e1780fa8a47196d9779e60
SHA5128b48e4f9d3abad5ad151ccdb386fce07eb8dd25767424ded3458c15abb334855bdb84356a57930940c2ea6193a39c592ead184d83e4eb2f5cfdd62b964dcceee
-
Filesize
46KB
MD5babe221eb8014bbdcb27b4bdcf606f72
SHA13da8654276f78bc56ee52845d87b72d75b2c69e4
SHA256a7eed17abd88f84e5143205dbe11cbe2f9e3cbaee486fb55e97a04273d93f4ed
SHA51281dba8b8a25556679866813c02642e95f18d1670b6f354c2713c922a5e974c7b4bc4b68a0930091b49030c377148275e92217081f67f49557ab185d059851ad5
-
Filesize
539KB
MD5035c4152a3015d6b5e772f1b7d6a622f
SHA1127905f98246779ace2e417ec8b738dc96d64f31
SHA256211082e254715f6b7d1a5622499f19bea7d3597a0cfe220ea2507401b99c4824
SHA5122ace7e1c69f8912cf020ef3b557e57fd7729468d04e98d54a2ff76be07c38144a21c7a83e92824341ef5f7120f2cd604f2537c20a0d3ab6a6af6dd4cc9cbec87
-
Filesize
163KB
MD52bf4ce1cd01721117aa139d6fc5d090d
SHA1c4d4031b673ed33e0d2be6ad15fd71805481968f
SHA256642647882cec9886010fda0a17039e1fc3b90a1fde615fdf1889889bc95879db
SHA51296fe73300b034037dbb5beb136b3890378bbbc267cccffc2ebdf7b09c754ede4f734e61680944f12da70784474307bbe59e9dcea15bfc26ce67196eecd5eb43c
-
Filesize
3.7MB
MD597d893cd2879f8e9a6bc8a35d203b2f4
SHA168ddf1e3a98e080c4ef2c9d241a31dee6aec240b
SHA2566e7ed993131a5beb3b96736320bafb83a063d3043015bf2b14eea6601a414ab8
SHA51230804c88389b54a6119c7c134af315330afb234d743b51acbb25f11d2aec3400c7498e918294f4497e49ebf7ddac557509847d785d58fe9cd381a3fbf8eb9378
-
Filesize
23KB
MD5e6969a95ca8b62725206ebef19af0371
SHA160bfcad0dd79267793c3b8ff109a98c4201ffc18
SHA2563f177ee6d35f0dbeb0f0719f4e20404abe6a101c375ab6d27fcd28aa846def2c
SHA512ae45e272f4b0207dc8720681932641b53379a8b4d1ee7c878ce7804cc475069812d8dcd8689dc6383911b51af272801dbce6b076aaf60f5287c2bacbce8d95e6
-
Filesize
1.3MB
MD530195aa599dd12ac2567de0815ade5e6
SHA1aa2597d43c64554156ae7cdb362c284ec19668a7
SHA256e79443e9413ba9a4442ca7db8ee91a920e61ac2fb55be10a6ab9a9c81f646dbb
SHA5122373b31d15b39ba950c5dea4505c3eaa2952363d3a9bd7ae84e5ea38245320be8f862dba9e9ad32f6b5a1436b353b3fb07e684b7695724a01b30f5ac7ba56e99
-
Filesize
1.1MB
MD56cadec733f5be72697d7112860a0905b
SHA16a6beeef3b1bb7c85c63f4a3410e673fce73f50d
SHA25619f70dc79994e46d3e1ef6be352f5933866de5736d761faa8839204136916b3f
SHA512e6b3e52968c79d4bd700652c1f2ebd0366b492fcda4e05fc8b198791d1169b20f89b85ec69cefa7e099d06a78bf77ff9c3274905667f0c94071f47bafad46d79
-
Filesize
101KB
MD5e2bd243023df53c409a804884afc2948
SHA1eadd808af885497f456559161692aa074a314ebd
SHA2568e7e968d9292e726a289105eb1991d6f3664e9702d521b68a23d49b7826bc565
SHA512efffa7778da61991fda3e5ce7682a94faafee44a26d49c86510976b4d3df8e7e4fe66233a48c32fe3b898191e72a2aa3e1e1f987329c242a68c1fec4a82976e7
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
192KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
5.6MB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
22.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB