Extracted

• • Target
    CrimsonMods.zip
  • Size 101.7MB
  • SHA256 5b6c41f48cf9852e0f27171633e3075e8c355a32b5a1a69d973354430bc488ab
  • MD5 9622f3a810fa08777e07528084938888
  • SHA1 b84b735c787fa87b51f0194084704d84b188150e
  • SHA512 acb7178434f9c4c5004116cb9bcbc9dcc0cd787744963851d8d01b5dc4439b5143f89fda7b6a879e358418036f364708bcaac139cfa9a8272ec6f2c5e2c97616
  • SSDEEP 1572864:OBgV8HP7Vna4o4QLguMD/NxRoW4eM/VMaTYqN9+wT5CaNUUk9FPLvRmvn5aUw74a:OSV8H5FlQLaD1o/YqNlCa2UmFvY5w7Tl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral1
• • Target
    CrimsonMods/ReadMe.txt
  • Size 298B
  • SHA256 2a4e511aeb726f9c30bbef92b1d20377d53f27a27abf0c767d61cdcdb6b1abc2
  • MD5 ee5d53a0a1291262864016ceb9967302
  • SHA1 706e70799936e176fcb94b4be090a87bf1788a49
  • SHA512 6f14267ed084b31c8c28c1e9d5d38447c4fc9b9df5afab4f8cbcd2188f6a86b5598b0139d1b15b2188c6bd1f00501c228f2a13b8860fae5385c517ffac4b7f88
  • MD5 SHA1 SHA512

  Score

  3^/10

  ransomware
  behavioral2
• • Target
    CrimsonMods/config/app_24.002
  • Size 863KB
  • SHA256 42894d93c7aae22fa6fec8c07a636fd265a84e45a3d3546db8f7ca38fbf5090e
  • MD5 dfb1468709c1023586dde13da9a48a58
  • SHA1 3a9dc93fb1fdc03646075c5e7cfa9ff19ef8882f
  • SHA512 f682987905f41fc1c88f1ad90098206f7ac2fbc5553f2e2f878064baa53153c690ab28484be2307c32301c38537019440d50dcb90f06da6572cbd80edc893533
  • SSDEEP 12288:QF0DFiw4KwOHPAeAJ1GvY45/zO1um4XM1bsQRIvADxeQWPjiXmCmm21r3:QF8Cu4eJvYb1uvX8UIwQWPYPmm2Z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral3
• • Target
    CrimsonMods/config/app_43.sdat
  • Size 961KB
  • SHA256 3c7c7a8357cffd0633de30c9f3a2b753e1dfe367fe41742f3ea53b362ebfaaf2
  • MD5 65458147fd3c32bb74453a287ab33758
  • SHA1 768062d51a54ff2ab15d233406dfe1df69c17fcc
  • SHA512 eeb08b8323728e979ce3c4b57da34c3c76e23612aad638f88ca7d78aa63cd1961a7003dc839af68fe4e7fe730931d6a1f5f4b2adab30e6d31ce15fd46c998b93
  • SSDEEP 24576:37LaU1k1bQkbnM0hwRzTHXrtt4zp4UuSvGVSmcVLi2AEgI+AzKt:331kdQkvczjXpyzp4U/MwVe2AE4AzKt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral4
• • Target
    CrimsonMods/config/app_71.sdat
  • Size 1.0MB
  • SHA256 c0f49a9b2740e3641516c4c9b5f3e414629d68a9ed1f5feff104c7e2cca04fea
  • MD5 3bf0e27084625651cbb0b83c2781dee5
  • SHA1 36b174f181b18a642f7afcfc68a733c8602c9703
  • SHA512 3655b520703d9650535dd279cc3a01f1a9150367b7175748c4aeead1d2d74b8b4466b2af55800430793a653a9b688615ba1424baa9bc73e15c8e37981561668f
  • SSDEEP 24576:2xWjxhECh+tRH/llBG/I6VT1AazjeWkaJJipn1EdOUHZNk:2EjxutRH7BG/I6VT1AaDnit1Kk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral5
• • Target
    CrimsonMods/config/app_86.001
  • Size 801KB
  • SHA256 0fc94e3cb2b3d5be49db83ad23217fc5992c119dfc6d0ba286d9108cb8c63e33
  • MD5 d15fef6724605f67812ddac0122b5a9a
  • SHA1 dd227c5943a16ceaf1fd940aab48ceda1ed2ca51
  • SHA512 98e37f358ae7b478488d6d6a75e16fdecd4873efa9ee7bd03c4afcc679078db4e4d5de20535fecb8ccaeb3dd68c433d36a2d6f48b7f288bf593dd63165ed485a
  • SSDEEP 12288:kmnuuirlq9xBpm0l9kSqOmlnahkYTUorWZEntPKOYJeSqYc0xEuSp8TFXak4dGuT:juutr1N9mFlAzttenSp8TFXYcnQF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral6
• • Target
    CrimsonMods/config/archive_64.dll
  • Size 707KB
  • SHA256 787b7c5162d59f6ed02da842deeafc184f52ecbbd872bdd7c1f1deccfeec3aaa
  • MD5 01d41f77d7ba60fe4d2a167d2c0aeb7d
  • SHA1 b0b129dfaad39a7fd4999540528b3faf2997a84d
  • SHA512 84742c810a296bb30417018b37cc7fbb3e1eda614c8c9770728ac233c8fbfd56e0fcecd115387be71ad2f20ebf646156e626d9a6f5431299f6e8360b52d6c22d
  • SSDEEP 12288:8g79ordDt6CmrD2G6q7kvj0RprphN9VfHES+y6tYMs1Xz+657LRPzCvfolEq:8g79yDt6CmeUwvj0zN9JHbCtWZq65HRb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral7
• • Target
    CrimsonMods/config/archive_66.dll
  • Size 1.0MB
  • SHA256 4cfbb116b75ed9f8fd124d162474b5f7d8e2f2a65df0f5c33d6ed735b54a53dc
  • MD5 a237bbcd0b0f97df647e28dfd27711f1
  • SHA1 8a007975e374d37d0baa743aa36f37eacfc1e94a
  • SHA512 1f56c12378f288ec1a620aad4c25a336a89a166c341a085db8ec7dd33152c03da9c0064883f2175273853076fd48db540af376f59cc3938d975fd046fbc97c36
  • SSDEEP 12288:zPVFkvsNFFFOGF8mnQRKreDzzcxFOYNSEXdpMlMbIggFXykT98mut7WC+xb8N/Nl:LnUsN8KXwqMlMUX1utKC+xbUtxjQc1Dt
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral8
• • Target
    CrimsonMods/config/backup_104.dll
  • Size 711KB
  • SHA256 21ed904851b924eeb785b64162e456808f3d13f37106ec4f676645bb96737d38
  • MD5 f8a7d979e6db3b230acbfcf66ab72c49
  • SHA1 43118db21e3e9830d7aeff38421fe55f3e4d5068
  • SHA512 c9d7177e331026dd84202bc94a9c598e4edc981aeb7ed47825fd54fed05c0fd1fa269bc6a7dffa5a6795c50c1e90e9978377d34dc3649b851ad3dedf467c32b8
  • SSDEEP 12288:u3MztbzO6MnSJqkuons4Oj2tyP8g8wyYaxQTMgKTdpMU6eEZxmS4a6wRyC5pD77E:3RgSJtZs4OPPl/QeK7wZXNgCHER
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral9
• • Target
    CrimsonMods/config/backup_51.sdat
  • Size 1.0MB
  • SHA256 1412a5b822e28fe922be915a05e480bd9ccfe77b089b5b2222a511ff20bd014d
  • MD5 969d5449c9baf716088c214187f9ed00
  • SHA1 5c1bcf26870e4c8816845849374f4fba445f413e
  • SHA512 a5332ce292393e95bfb2b2aa39941fd38e05ed3ca746da8f6368baaa328c712dd7eb58439b7f516459f28f712b7993f4bda3c19d728862720dde88a94b4c2560
  • SSDEEP 24576:woJ1jA02T1FaQ1fkb87mqjZUWeDeXYYCHgOnt2G3qWdkYY/WoM:TTi1FaZb8T1eD8Jet2G3dJQM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral10
• • Target
    CrimsonMods/config/backup_68.002
  • Size 672KB
  • SHA256 fbdcb18b13daeb85374706df9c7e23b100bf7340bfbbda9f92d379b6e2387a8a
  • MD5 04109f894891e650f6eb4f91a8dc71cc
  • SHA1 f2dff359fd94d5f1141f1d32a6c4216823d27712
  • SHA512 c2af636945183bb611ee8317fa181637fe23767b3d5408b62795ef959615d6d0c800556a8a19c41fe975fdd49fcfc63364a70325e06569424f64fd25638cd64a
  • SSDEEP 12288:M1B5+t+8m2kppE2l/9lHVh4MCG4xfgJaKvwiXTLATa21u6MzwtTAOpaN:Cj+Q6Mi2h9ZVh4O46sujLSrMibq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  adwaremaindefense_evasiondiscoverystealcpersistenceprivilege_escalationransomwarespywarestealertrojan

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Event Triggered Execution: Component Object Model Hijacking

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation

  • Executes dropped EXE

  • Loads dropped DLL

  • Modifies system executable filetype association

    persistence

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Drops desktop.ini file(s)

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery

  • Checks system information in the registry

    System information is often read in order to detect sandboxing environments.

  behavioral11
• • Target
    CrimsonMods/config/backup_79.000
  • Size 792KB
  • SHA256 a0e8197a0a6103569b7f1e0c7b5a960da0971b785355d861443a2e24656bbad6
  • MD5 014204d1589176c538e6135526dcce51
  • SHA1 69dd670c3ed03e16fc0c93b758d74a1dd4bf36e7
  • SHA512 5e4f44b4213b3b98cad20b26f4e361231729402b283888835670e82ff6817dc30f8b52ab4c3542203689859e1eed68e7ee9bbf7b4d297110707edad5b83a4590
  • SSDEEP 24576:w3EvnDmyHELm+pGxbgIYJCVgi+uFB2suWU:w3iSnq+pcUCVgidFBaWU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral12
• • Target
    CrimsonMods/config/backup_80.sdata
  • Size 525KB
  • SHA256 048a75db5f77e23696f735a36272007dbdf48f44f023056f2beeac5a970a7196
  • MD5 547bcc43ef85b959268d05c8ce8652c4
  • SHA1 fdb924e2d326b10d24518a0b4f528dacc5e53105
  • SHA512 9d6a04711acc398a1a1812fb4b074bae0aaba4b9d3ef8302d2335c338fc9c89f7d13d6cf32f8dbc2e0e7ff1632db7dfe3e6fdd9dba4b62c34c59f6e9551f640d
  • SSDEEP 12288:EdF4OYAJPKhJaMM7QPmipzsQnrt1X5P11Y6wp8UCYUhm2K13gxUwn:E8Ol9KSMM7Amgfxbwp8Xg2K13xwn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral13
• • Target
    CrimsonMods/config/backup_99.dlm
  • Size 706KB
  • SHA256 5484642bcf304fec28d5ba4553525016eb979992b944014565214d63b6e0b624
  • MD5 22eec59bd5c55bb68a5985559303370f
  • SHA1 9f0bef85e5eb6744096a7b98009c04566613b54c
  • SHA512 165db0c93a3ac8f7bcbfeb1e1a5f58e51bb08856ddecc2471e77ebe7fd32abd4701e38ee3ff7d32ff6a321f10c888c4e1d6427b2096a921c84ff64687d0ba42f
  • SSDEEP 12288:AjQ22bLQNCHM9RcGp9x6cZrGkYMRv+3CzmmQw2fjAJsE/eovD1twtNnmKB5wPAuk:Ap2vQYORc4wcZrGFxyzVQw2LcJmqkLmW
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral14
• • Target
    CrimsonMods/config/base_0.dll
  • Size 595KB
  • SHA256 452df9c1089ee4d46dab0d7e18b6de0f23fc29f6b41d497ac15156c4b78b3271
  • MD5 e1e4ba2a10e6b197a293be4fd367c053
  • SHA1 52b60d5a6f10255eab0628e3e8370f9d06430d60
  • SHA512 96c695aebdc46cfd966b62c2b6bb1832a618188b9b0521def7e41aad2c5b371051199a2e5cdc02d75b5b0258d3b33b8b8894665951fdd0694bb8b2341312cefe
  • SSDEEP 12288:FHDy6NUlYyi53XCJqqE1i2Hya8is2BiMDI+3zl82/igiYZ:pBNl53yJzE1iwU2BiME+3B82/iu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral15
• • Target
    CrimsonMods/config/base_120.data
  • Size 607KB
  • SHA256 0e4722db3f4b96d7449e9194849094a9dd529252231adeb31d5fdfc80bdbe207
  • MD5 3ac81af062dfc20b3856bb193ba66fd3
  • SHA1 a25b26a2f3d26152487c50fc3afaf8e2ac78fe56
  • SHA512 8886dffef57bc57b045f0211364823a7f97e02c4f7f44d6a075dedf34ec58c7d2b2de48d036a9728bf677a7d8c92236e4287f61e2bf6d72dbf0fb18bd09dcbdb
  • SSDEEP 12288:rMK/91zLYu9qndcmH3H7yM5dJKQS3PgwGRzhciWua9z:rMKV174ndcmHtXQ3PrGfciWu2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral16
• • Target
    CrimsonMods/config/base_2.bin
  • Size 979KB
  • SHA256 fdd132fd42235b574350bd06af620870582fae89500f7853428c5e7ff02fa5b2
  • MD5 3dba2f649756a37a117d8374d1e5a324
  • SHA1 b2e1235958a293fcbac548f95c6de611894532c3
  • SHA512 dc0a13094be9cf84148b0b8551478cad26d5abf22977a2beffe489b2778ec831dcf9de2dbef756e8c0feba5121ac586ae3eb3e700b68886c5db40bf21b80da7b
  • SSDEEP 24576:PtJBhQPd13uTvMatHo1E+gVJNaCZyRfKBx1Fa9mWNdX96Ss9lAqGHE:1JBhQPHu7MKS2NaCZWsS9KGHE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral17
• • Target
    CrimsonMods/config/base_74.001
  • Size 722KB
  • SHA256 e4b0493a7083d2722c3056016a823c7ac24e710107db842bd1aded64ed8113bc
  • MD5 3271d362c03810d0f9a2d60379eec144
  • SHA1 945618d952beb68e84d89f6336964fa35e11b894
  • SHA512 9a3f33b9a8ca32a9defb828ffac566e8b09e523194d262862deaa19b2f201a8e1eaa6c689e19e40b8e04c2ac02c89518383c8419cc048eec05acee65771d4de4
  • SSDEEP 12288:pkuc4KhBQIxnfy4HaNNOEE9Aq9BKubVCpLdQCvN+47kdIF15REbB7byTcINyoUpa:DKhhxK5jE95nK+ABdPLMIF15W7byTcKH
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral18
• • Target
    CrimsonMods/config/base_77.bin
  • Size 611KB
  • SHA256 d71fd28b850a90dc3e05342ad3280c6f2a5221dbdf2b61d3ef2dd4bf621eb722
  • MD5 c07593d1915d1add570303007b01f321
  • SHA1 7952cbae8933b7accb177300783b38b5ddb11311
  • SHA512 ef957e95c4ad3fe701c73ffa6b7e36dc1a316278b7798b16c8655a1224e5ff21d9c12a9ba77d6e2dc297276e13c059efbaa61a4391a9b5405838600fc905810e
  • SSDEEP 12288:NLbqFnyj8KSoHoyom5SNrlpB0fv169d7JspNuqxo4SHBC:cJs8Q9oOSNrlpB0fv1IFONuKo4ShC
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral19
• • Target
    CrimsonMods/config/build_100.dlm
  • Size 1016KB
  • SHA256 57fd15c73ec4c60edbbcc4459d4cede2436d1de9d461a5479e8c6f254fbd5c36
  • MD5 4cf5659d251fe38c2fbb665601c27fed
  • SHA1 59ef1e1690b4d991c6235808c1d68f961a09d971
  • SHA512 ca35b58f6dff825c0ba66b11165855e57460934dea9b2ae516c4495702efc9c2bef6774754da4194d747821086b07a9362688894a6b5a1df451c6a27ec119885
  • SSDEEP 24576:VRavcBePltmCiLNnG/NdFc48Sdz20F8kMgS5vBSaOsdCofuNy:VRavcBePltmCkNGrFc4pdz2bksPuy
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral20
• • Target
    CrimsonMods/config/build_105.002
  • Size 827KB
  • SHA256 948ad368cfbe3a7572573747cd4e136a3d5e06bf55275b9af690963fdfa95c69
  • MD5 89c5c2d34ed5bf99af9e56b583ffc976
  • SHA1 66690adb77e98eb92aad2dd413daa971c04762f2
  • SHA512 6701bda39dc58f47e35c10f1ac74044697c61b50d2a2f5df92565f90f8f30f27afa2af4d41df3e20df0e505d91f062a3ed2749225dc27c22c5388ab258da2045
  • SSDEEP 12288:f/j37l22ZmbH8nS0cRa+rY3QoPx+OoPv4Zh6noxw4KY4SIZ+XsjZ0Tuq3N/vLVzk:FLZmLmSV5cnpt6ATdKY4DZ+4Z06qx+d1
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral21
• • Target
    CrimsonMods/config/build_15.000
  • Size 740KB
  • SHA256 0dd2b3ba41f067a54132fe5a89b9944b761015ab69f08ce9842889e91b904774
  • MD5 f094ccb2cab442551f0235155a069228
  • SHA1 8c348ddc5227a6226d9c2313f1344e5e8ff97680
  • SHA512 682b0e58b9cf6691aa11c76c07afc23c86c0d04a080fd90fe2fed8d4beb80407ce977966c6411b09df11d355ca4cda9eea672b26ca091c482383d83de918e2a4
  • SSDEEP 12288:xKBXtuaPnnpC7+jsYs73+qAU/awMCTfpSUpbMgsxD88ON1d1UcXxym+TLAW4lVnG:xeXYAKOm3WFwd7YU1Tk88OLUchd+TLUu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral22
• • Target
    CrimsonMods/config/build_61.002
  • Size 632KB
  • SHA256 6ff40c5376d4dd00fd248d3bae9ce06aa052df76bdb730d7cd34d89b5d66af11
  • MD5 264243e304fbd548613cf754fa7475e3
  • SHA1 8e8b3e24878f437a1519c72fc2d4b55b1ff97a85
  • SHA512 0a998f68403ac2844cd9287c86b34030919bb605812fd7852c7965f90cd08af091bc82fec074f86549b829f7a9ac64de952592f99fd8f2c50ffc1a63e7b7a154
  • SSDEEP 12288:6JQHiW3LRaFsh+Xkd1JkenkZMKtXUQ8CFrCkbThY062bR7C9rO:MxWFa+h+Xkd1JLkZFtEQWUtAO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral23
• • Target
    CrimsonMods/config/build_72.002
  • Size 1019KB
  • SHA256 ddbb6caa8bcf1f7a450f04093ca584047177c74e2ac217e08aa43e2480780f18
  • MD5 b21920815122f94d4d0eb9dda14ead59
  • SHA1 8710e141add93412d148cbffc1502b0cb0301e96
  • SHA512 dab2c4ca03b6749294cb47a9e6f2871d80c767494402506f2d1dbaca84aa1d73db89492392e1c42163779a5cb6a5c407db5d53faf1afcc6f0b6e3958894b179f
  • SSDEEP 24576:rUw3r6IPZzFVOCc0quCBYpzyEEY0Avhmq9XXMYRbYiM3:ww3eIxjOCc/BM0lq9HMYRMz
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral24
• • Target
    CrimsonMods/config/build_87.sdata
  • Size 781KB
  • SHA256 9193c62a142e2d333ad3f394d41ad1abea26ffd76869a6248239194ebb324166
  • MD5 28dbb80d9be359f40c155c2345310863
  • SHA1 b3bf5d64fcd913353a236adf0d6affc23329b91e
  • SHA512 c357a07e99b50c75f4905284ba9ab70bfbfcf44ee42f7e66743d29988f3e94d1b70cf359ead0af07b855cc8c822975ea0878e1b117bd459c8cb2496d0e744f79
  • SSDEEP 24576:0FPyArdpG2tWSy1rE5oLO24bBVTcDqDjBx:0UYd0gWSf5oLiToqX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral25
• • Target
    CrimsonMods/config/cache_10.001
  • Size 624KB
  • SHA256 2266671eb26f8ece5adfce590e87512192d956f398972b5843b0042d02ee56d6
  • MD5 1deb556dc6159e88d4671af446e91e0d
  • SHA1 3292eb04be925f2877cd82d125794a717972f3d3
  • SHA512 8cbaa686f353c5fb6484992b73725fc82b9204f8e88127133f1465c7321c1d415597c990e4dfb18c759271ba4e768176bbaf992f37c859fc89972f1278acb0a3
  • SSDEEP 12288:k9gNHh6qEptDjn1eujJqVr75mTjRLhnKvO8h5XN03qeUSCcJCVnbZq2AnEDWskA:kSz6rPQBVp0RL1QhNe6NSDCW2AED8A
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral26
• • Target
    CrimsonMods/config/cache_103.bin
  • Size 834KB
  • SHA256 ac5298f77da5376eb313ef9865e88e661f953aef3536780e50aa2adbcc83b837
  • MD5 e8db6f9ec4bb2771c750f1e8d17605b1
  • SHA1 3695f064db6a01c1cc45f194d4575225d84c6e6b
  • SHA512 0b063665747f07bf5bff710b1a13d63fa7640ec8a8504466b943068a39991c8835443137daf55b17ec5ae7238ed1c695a0888f4ef3f71a37eac5a315e27ed5d2
  • SSDEEP 24576:Qqx85qp9FegFuJMqw52zFPcl0WhBhGun/W3cRZU:fcyF3DqwiPc+WhBhGhc4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral27
• • Target
    CrimsonMods/config/config_58.dll
  • Size 1.0MB
  • SHA256 1d6cee8c1d2a7694cd7fe899164f9877847858379bd2f492bdd4139fcb1458bd
  • MD5 109dc5990b8bcf069436691ead886f78
  • SHA1 5eb5aaa21a2b8a4855ee8c71fdf3acc4a2df9ab8
  • SHA512 1897bae03afb1a0a522942918823eb31d4111eff47f2e77e31b44fa9dbf969eaadaaa5d64b23f43ac3f8f343594050bd7879bd8e209f75e3b7c59c38d29d71d6
  • SSDEEP 24576:1gwA3T0dD8c08GB7xrRGXtwHiDQj6/mALRYxQ4L4Bq7eMX:mvYD8c08GB7xOqC85o2B7lX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral28
• • Target
    CrimsonMods/data/main_12.sdata
  • Size 940KB
  • SHA256 9ecd658775bcfc983b94fd7dc25edd50051ca2bc6a78a7aff546e0dc7656293d
  • MD5 1aeb19e11e08f9fd4f565c006a51f5e3
  • SHA1 216e0ca9cd6f924f65d5d037e7a9e94096ab58c3
  • SHA512 614f06d33390d128af73e1ab3ba2c3003fbcc139dbbb10e907f534b69dccd5ee5d3a1c8be7bd65efe4be9bc3839fe099d03153c59d9ccd28da1cdd1bd5ca4023
  • SSDEEP 24576:U4fRJjbXMfxI0ycKLVqTUt9g8P9cBN4JFfRfJmdWW479wyF5l:U4f3rQEC0W8P9uN4J1JJmdWnu4j
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral29
• • Target
    CrimsonMods/data/main_67.sdata
  • Size 997KB
  • SHA256 0d802ef1bd4271306af4459374adddfcfa272866639d8314811362b312260725
  • MD5 01575ae7e67d3498beb56fad34a20d96
  • SHA1 97140236f015efde06c185255682ad7a236dda7e
  • SHA512 a4c4154771ae0d72e8207488a2f412e2988e17db042922b2062caf73576455a11d4f07f0a73aab460b5c9778a3534cf6734bfe8f18bbf26a15cd1df3b79d22d6
  • SSDEEP 24576:yoc5HEyNqtEMCU276O6d8vk9TBW9ZJ9IhynRxki7E6+I:HgBUg6gc9dW9Z0hYRxJ7E6+I
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10
  behavioral30
• • Target
    CrimsonMods/data/utils_123.dat
  • Size 704KB
  • SHA256 c498b877e4c41e5be4869a829425ff726dc9466c7cdcd294a6f101e00d312959
  • MD5 e7021ceec51172dcbc61c6b2fe918b3d
  • SHA1 553da76e14c0ba52de2a51a9767ddebc351de036
  • SHA512 0c89df6f2a1d8cf6f8d4140dddd0475d6b69f017ed8d095408b3d1a4eb05c42c978d1d9e714d14e97ed4aa493d98571881b52d4b47daa9ee5487c15fe8f3906b
  • SSDEEP 12288:JNhuRNcCZjp6NW+vlwiwJwtTQdvKzJCHqCv+LO1Z8sQd5kRsHXqhb0+ideRDdG:/Q0G96NWKq89zJCyLOf8sqkiHaq+iIG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  execution
  behavioral31
• • Target
    CrimsonMods/data/utils_39.dll
  • Size 605KB
  • SHA256 42ae08150ab257b9b72a20778b735a98967bb5476f966d384b7671c7552a12b9
  • MD5 c62d0b7057c0f3b7175000929915d115
  • SHA1 cf29945f813793335c154a9aa850f7a3eca5a02e
  • SHA512 a5dcc24038a86dbdc9ccfe95ee6e5e3291c6fcefc33e9675f9beb6798e37979eb2ba3e5034a30bfdec6e8bff3cc459977b8fbdaa3ea40f9479b7cf957bcc9a59
  • SSDEEP 12288:Unt4vFM8FwsgpBmFEERNi+OW/C+RNLQcATqYJWc+f+98x9LF4LxuBuR+:Unt4vFMGWHmdNZrPNLQcATqYMR5xhF4i
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral32