General
- Target cr-keygen-x64.exe
- Size 615KB
- Sample260722-ymnv7stdrh
- SHA256 3629cc5bb69300d10f69477e16b62792ec3c3497bbf29619347ecf0aa4774579
- MD5 461ad1021ba17d4ec88358c88fbb1bc7
- SHA1 a56627ecfa95371158ac23a7c12210f7fc3baa50
- SHA512 6b078d1d6e1c8d2455e754065cbd574c055368b09245735e342f3eaa799b647a8c9234147bbb4cda41c14f25d7d88ddff2a6d1993df112e95e394e1cc72942c8
- SSDEEP 12288:t0vChqJETcHxvW30N12BZGjS2DKyTAQcLiUDGATw4jF9Hi4/2MJKYr81+eW:bhPcR+30fsZvocLiaje191a
- TLSH T13ED423F0CD6E93BAC7DB49B3400C15EE5A41A90FEFD52A04642B7AB5C8C14D9AE72538
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
cr-keygen-x64.exe
Resource
win11ltsc2024-20260709-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target cr-keygen-x64.exe
- Size 615KB
- SHA256 3629cc5bb69300d10f69477e16b62792ec3c3497bbf29619347ecf0aa4774579
- MD5 461ad1021ba17d4ec88358c88fbb1bc7
- SHA1 a56627ecfa95371158ac23a7c12210f7fc3baa50
- SHA512 6b078d1d6e1c8d2455e754065cbd574c055368b09245735e342f3eaa799b647a8c9234147bbb4cda41c14f25d7d88ddff2a6d1993df112e95e394e1cc72942c8
- SSDEEP 12288:t0vChqJETcHxvW30N12BZGjS2DKyTAQcLiUDGATw4jF9Hi4/2MJKYr81+eW:bhPcR+30fsZvocLiaje191a
- TLSH T13ED423F0CD6E93BAC7DB49B3400C15EE5A41A90FEFD52A04642B7AB5C8C14D9AE72538
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1