General
- Target test2.rar
- Size 278KB
- Sample260714-2ll7rsg191
- SHA256 e24f1ce2848e1f23f4fc04090155ed697d2ccf80f9af4f610ec997b4238331e3
- MD5 7a03649266e7f5b14daa15205276e1b2
- SHA1 f6c7ddaf622eaa87e7d038668dc86ff8a5a90502
- SHA512 699e453033575075229770645c23a385382691c227d074f120fa374a3500c4fd461d511b6ed79c313a2568d2c479aa9a32fb4acff49526a5485a1d0e51b93962
- SSDEEP 6144:nyxcuLh5ViXtzdi/dQ9gNQ67anGOlNcpHeCW1Iwr+XgPGt:nyx5N50dieDGO7fCGp+Jt
- TLSH T172542320E3184692CBE9999B107A66087E7799F47C39BC5E171C7CFD5282A3188633ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
crack3.exe
Resource
win10v2004-20260513-en
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
crack3.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target crack3.exe
- Size 1.2MB
- SHA256 c7476c8fb48f5febf3585108ede1caeec1ad6fe61f8322b94a34b45b6db56a59
- MD5 c3d8c7b33507509120584bd43dc52596
- SHA1 c2836b57aa62c44d1443912bfce8a9310f92700c
- SHA512 2d2433a81030e683d04265908709708a1ed0e527ca6aff2cec4b0280736d6f7b2b460842050d3d1af17b862c213c85b809d60c271f31087f817fd450ffddde02
- SSDEEP 24576:/U3qT42th4FgBOKHqSv5qmKDqSha4mnYIVgVA6LO0vOO4GgnsJu:/U3qT42v4FgBOKHqGqkSha4MrVgFLO04
- TLSH T163453BA5BF22C35498422C7814384B09DB387F8EC22DD657D7AA3542371DB9EB1AF385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)
-
Probable phishing domain
-
Suspicious use of SetThreadContext