Analysis
-
max time kernel
150s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-09-2024 13:24
General
-
Target
CrocodilePhysics.exe
-
Size
85.8MB
-
MD5
5bd3c6cd1d892ec5206a163616a23b6c
-
SHA1
66d1f2eb178f37351895a494f694430737fcb0d3
-
SHA256
38c3cc0b2ea9943aab04ba749131dd536f9c13cd8e1569ac0a320ba6fd2f5586
-
SHA512
3127276949c2b84f97ff6aecce41c9ba99849996ad8514b84af0578fc28ab007c61f28e752bca290dc24e9ddee3992a11836f792a50a213a3f5bc85079500fcd
-
SSDEEP
1572864:zVMIQqbKa5/UQq06oKj9KAyFxKPBnM1l9zeDfjyxExcNbeM9zeDfjyxExcNbe7:zGIQqbKa5/UQq06oKj9KAyFuBMXsDfx3
Malware Config
Signatures
-
Detects Strela Stealer payload 8 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\CrocodilePhysics.exe"C:\Users\Admin\AppData\Local\Temp\CrocodilePhysics.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3808,i,3387628439405076340,17957358341235678872,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:81⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
456KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
16KB
-
Filesize
4KB
-
Filesize
456KB
-
Filesize
456KB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.4MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
4.4MB
-
Filesize
492KB
-
Filesize
344KB
-
Filesize
344KB
-
Filesize
492KB
-
Filesize
492KB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
4.7MB
-
Filesize
1.8MB
-
Filesize
908KB
-
Filesize
4KB
-
Filesize
16KB
-
Filesize
1.8MB
-
Filesize
908KB
-
Filesize
456KB