Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250217-en
  • resource tags

    arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    18-02-2025 07:59

General

  • Target

    Cryptic Release/Cryptic/Cryptic.exe.WebView2/EBWebView/Crashpad/settings.dat

  • Size

    280B

  • MD5

    dbb6508011df2fa15230bf629d10b904

  • SHA1

    80b518b49593c098a9c84105669816741d9e4d45

  • SHA256

    3138bead71e5e2eaa6c59d6aa02f3bdb2635920b0b74f8dec37a0366811292dc

  • SHA512

    fb11590d4476b961b385102aff2f60497fd62d3d75dfa4500c858cf8767967a51898a0ee05b2b385e3865e5cc24189744a4a90a3433b87d75479f56c224af6ec

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Cryptic Release\Cryptic\Cryptic.exe.WebView2\EBWebView\Crashpad\settings.dat"
    1⤵
    • Modifies registry class
    PID:2720
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1196

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads