General
- Target Keyser Crack.exe
- Size 5.5MB
- Sample260523-stbassev8t
- SHA256 0807ebabb52b9e4142ae8d69092d572f53455640142c5a12331b3f84f439f01a
- MD5 7f46f461617bcca1330d0b9aa8670cb8
- SHA1 ab440e4c4104fac33b0a1d311c47c5bfc40e4468
- SHA512 db7bcf2d4b31dafc45e38925052bd912117d085d0c8bb68b9ef68f55a73c1d0b033900bbe1a64de176284de5d0559a76264ceb8bc46244c8de14d14d5e464575
- SSDEEP 49152:ZzWqXTy4CP9JjU291m8Njg0XuM1LNDJr6M+xh7mbWUtqTYQ3oP9cj8lMyQ19y:Zx/MI0XRFJuMWIk3oP9Pw1
- TLSH T1CF46C016B3A652ACC02B983CDA63E227E37274102B3997DF73C406659F577F00A7A746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Keyser Crack.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Keyser Crack.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Keyser Crack.exe
- Size 5.5MB
- SHA256 0807ebabb52b9e4142ae8d69092d572f53455640142c5a12331b3f84f439f01a
- MD5 7f46f461617bcca1330d0b9aa8670cb8
- SHA1 ab440e4c4104fac33b0a1d311c47c5bfc40e4468
- SHA512 db7bcf2d4b31dafc45e38925052bd912117d085d0c8bb68b9ef68f55a73c1d0b033900bbe1a64de176284de5d0559a76264ceb8bc46244c8de14d14d5e464575
- SSDEEP 49152:ZzWqXTy4CP9JjU291m8Njg0XuM1LNDJr6M+xh7mbWUtqTYQ3oP9cj8lMyQ19y:Zx/MI0XRFJuMWIk3oP9Pw1
- TLSH T1CF46C016B3A652ACC02B983CDA63E227E37274102B3997DF73C406659F577F00A7A746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger