Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
27/07/2026, 12:28
Behavioral task
behavioral1
Sample
CamelCrusher.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CamelCrusher/CamelCrusherMac-1-0-1.dmg
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
CamelCrusher/CamelCrusherWin-1-0-1-x32.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
CamelCrusher/CamelCrusherWin-1-0-1-x64.exe
Resource
win11-20260513-en
5 signatures
150 seconds
General
- Target CamelCrusher/CamelCrusherWin-1-0-1-x32.exe
- Size 2.2MB
- Sample260727-pns2wasbme
- SHA256 aa8f393e30891dae7cb30f699db4d5c7d92e36d1308889cd68393b7f1931a97f
- MD5 aec68e3b883dd81fb73ee40319990e31
- SHA1 7193297fc5116c4e908ad5937da4142e314f6314
- SHA512 9ba0ae1fcde5791a918a2fa72f0fea719792e7b08a24d3fb8f217b8a9c5852bb11d72a4bfcd154f2e800b566293cf4d3bb45dd9afa0a5f3624f0776729538217
- SSDEEP 49152:LLdZIBuwr3TKQ9eByp6VHVTUVVo+AA/mbLdr:LLIBuwyQ9Vp6YVzAombLF
- TLSH T101B5CF10BA86C2B1E5AF01F949BEBA0D9279EF41076522D3F7C4BA5F4E31BD12D31246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
pid Process 2952 CamelCrusherWin-1-0-1-x32.exe 2952 CamelCrusherWin-1-0-1-x32.exe 2952 CamelCrusherWin-1-0-1-x32.exe 2952 CamelCrusherWin-1-0-1-x32.exe 2952 CamelCrusherWin-1-0-1-x32.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CamelCrusherWin-1-0-1-x32.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsn3F28.tmp\NSISpcre.dll
- Size 164KB
- SHA256 43041f8540dccbc33268bfbef53037d17170b037f6393e77c21429f303ae828f
- MD5 bfe060c22b44914e05d3f5367de6c9fe
- SHA1 24c72b0b57b0066a5e8b235104a0502400e44b9a
- SHA512 ad3a23edd8d62b198e4a2ccf03f6d607dee41fa23fd6f9dfabdc5ee424b5e22a6e00b8a28e50fe177829a2cc25ce05484423e97c682036fc5146e2adf560bc44
- SSDEEP 3072:5YFyk+vtvpoYYPkoYMtXTP5V+4Km//sbJVlseEOb+Y+UT:KFyznYntXL5XKCk9MeEm7
- TLSH T1D6F38C41F887C4F2CA4B433A587D63165B38F7440BB68BCB7F845E7DBA916822D6124B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsn3F28.tmp\System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsn3F28.tmp\nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH