Overview
overview
6Static
static
3CrysisCoop...op.lnk
windows7-x64
6CrysisCoop...op.lnk
windows10-2004-x64
6CrysisCoop...op.dll
windows7-x64
3CrysisCoop...op.dll
windows10-2004-x64
3CrysisCoop...or.lnk
windows7-x64
6CrysisCoop...or.lnk
windows10-2004-x64
6CrysisCoop...op.lnk
windows7-x64
6CrysisCoop...op.lnk
windows10-2004-x64
6CrysisCoop...op.dll
windows7-x64
1CrysisCoop...op.dll
windows10-2004-x64
1CrysisCoop...or.lnk
windows7-x64
6CrysisCoop...or.lnk
windows10-2004-x64
6tile2_2.ps1
windows7-x64
3tile2_2.ps1
windows10-2004-x64
3CrysisCoop...oor.js
windows7-x64
3CrysisCoop...oor.js
windows10-2004-x64
3CrysisCoop...tem.js
windows7-x64
3CrysisCoop...tem.js
windows10-2004-x64
3CrysisCoop...ine.js
windows7-x64
3CrysisCoop...ine.js
windows10-2004-x64
3CrysisCoop...tch.js
windows7-x64
3CrysisCoop...tch.js
windows10-2004-x64
3CrysisCoop...yer.js
windows7-x64
3CrysisCoop...yer.js
windows10-2004-x64
3Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
13/09/2024, 20:19
Static task
static1
Behavioral task
behavioral1
Sample
CrysisCoop/Bin32/Crysis Co-op.lnk
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
CrysisCoop/Bin32/Crysis Co-op.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
CrysisCoop/Bin32/CrysisCoop.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
CrysisCoop/Bin32/CrysisCoop.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
CrysisCoop/Bin32/Editor.lnk
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
CrysisCoop/Bin32/Editor.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
CrysisCoop/Bin64/Crysis Co-op.lnk
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
CrysisCoop/Bin64/Crysis Co-op.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
CrysisCoop/Bin64/CrysisCoop.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
CrysisCoop/Bin64/CrysisCoop.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
CrysisCoop/Bin64/Editor.lnk
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
CrysisCoop/Bin64/Editor.lnk
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
tile2_2.ps1
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
tile2_2.ps1
Resource
win10v2004-20240910-en
Behavioral task
behavioral15
Sample
CrysisCoop/Game/Scripts/Entities/Doors/AdvancedDoor.js
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
CrysisCoop/Game/Scripts/Entities/Doors/AdvancedDoor.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
CrysisCoop/Game/Scripts/Entities/Items/Item.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
CrysisCoop/Game/Scripts/Entities/Items/Item.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
CrysisCoop/Game/Scripts/Entities/Others/Mine.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
CrysisCoop/Game/Scripts/Entities/Others/Mine.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
CrysisCoop/Game/Scripts/Entities/Others/Switch.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
CrysisCoop/Game/Scripts/Entities/Others/Switch.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
CrysisCoop/Game/Scripts/Entities/actor/player.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
CrysisCoop/Game/Scripts/Entities/actor/player.js
Resource
win10v2004-20240802-en
General
-
Target
CrysisCoop/Bin64/Crysis Co-op.lnk
-
Size
1KB
-
MD5
1a668109d996061cb7230abc2a7605fe
-
SHA1
62a391068a0d0f00f554b9ed78d5da9f82726ec0
-
SHA256
87f668dbc1fb0764266a866ba095ce8af94e4f090a05a26f81e86dbf883c5856
-
SHA512
dd67e43d68c87c1cc49733fec0ad1d9dd80ca6fac2faa4ef82b5d392f2663d903ca8d8994e8f5cb15b2c97ead5382a39d291b564fc6e511335ae9da9fa7db6c2
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: cmd.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).