General
- Target RemzzysCrosshair.exe
- Size 39.0MB
- Sample260715-ccvp4sb151
- SHA256 af8e7bdea431100f8ad80dbb17200a01638b01ad8c0850190fb0e6b8a6efcde8
- MD5 d41c58cfef405ffba39d191d696a8f2d
- SHA1 e32f3fd255812de6e88024437be9155110567fa9
- SHA512 3299a1080361c17d547213b2d18523af5fa7f625b025fbdb850c82ca799f6b653af5eac9d64cb140b3e6adf2cfec5b00e1d51039b6f4c9c966e4df5c35fdfdb6
- SSDEEP 786432:B2PJ+9TTfy3iK786wzkyBQFgzTUXeNw8m5lRmJorZ0:cx+l+RBwXzTUX0w8mxmJoF0
- TLSH T185971256E2FD00E8E57BC0B8C6575617E7B1344517309BEB62A48A692F33BE0AE7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RemzzysCrosshair.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target RemzzysCrosshair.exe
- Size 39.0MB
- SHA256 af8e7bdea431100f8ad80dbb17200a01638b01ad8c0850190fb0e6b8a6efcde8
- MD5 d41c58cfef405ffba39d191d696a8f2d
- SHA1 e32f3fd255812de6e88024437be9155110567fa9
- SHA512 3299a1080361c17d547213b2d18523af5fa7f625b025fbdb850c82ca799f6b653af5eac9d64cb140b3e6adf2cfec5b00e1d51039b6f4c9c966e4df5c35fdfdb6
- SSDEEP 786432:B2PJ+9TTfy3iK786wzkyBQFgzTUXeNw8m5lRmJorZ0:cx+l+RBwXzTUX0w8mxmJoF0
- TLSH T185971256E2FD00E8E57BC0B8C6575617E7B1344517309BEB62A48A692F33BE0AE7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Modifies file permissions
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1