CamelCrusher.zip
- SHA256 4d143d3cf6d21f4ec00a29b4a255aff796cbe28b27416f70726a3a9492f4fc71
Behavioral task
behavioral1
Sample
CamelCrusher/CamelCrusherWin-1-0-1-x64.exe
Resource
win11-20260513-en
windows11-21h2-x64
19 signatures
150 seconds
General
- Target CamelCrusher.zip
- Size 6.6MB
- Sample260727-ppwt6ascpc
- SHA256 4d143d3cf6d21f4ec00a29b4a255aff796cbe28b27416f70726a3a9492f4fc71
- MD5 85b7ad760d48bc1b6959d6e472f10967
- SHA1 74159a921df98be61bb0c890e0c27732ffee0836
- SHA512 f8fd9e5a0166add3fb8d8d9c2bc96cad6edc46abe54675ce8d713fe014615031ea2983c00370e44d052a2573e39ed88dd69b5e457f73bae77316f47fc4b4d13a
- SSDEEP 196608:5mSeb2y1D+b7sjwwBdqPW7sLZfr+oaRBG3xXQ:6b2y1DEsxBdONr+oaRQS
- TLSH T15666335E4B8C63DCF2FA856A9F1A5EDCDBC5A22167C174FFA48AEB181316750DA0700C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/CamelCrusher/CamelCrusherWin-1-0-1-x32.exe unpack001/CamelCrusher/CamelCrusherWin-1-0-1-x64.exe - NSIS installer 4 IoCs
resource yara_rule static1/unpack001/CamelCrusher/CamelCrusherWin-1-0-1-x32.exe nsis_installer_1 static1/unpack001/CamelCrusher/CamelCrusherWin-1-0-1-x32.exe nsis_installer_2 static1/unpack001/CamelCrusher/CamelCrusherWin-1-0-1-x64.exe nsis_installer_1 static1/unpack001/CamelCrusher/CamelCrusherWin-1-0-1-x64.exe nsis_installer_2
File Explorer
-
CamelCrusher.zip.zip 6.6MB
-
CamelCrusher/CamelCrusherMac-1-0-1.dmg16.4MB
-
CamelCrusher/CamelCrusherWin-1-0-1-x32.exe.exe 2.2MB
-
CamelCrusher/CamelCrusherWin-1-0-1-x64.exe.exe 1.5MB
-
CamelCrusher/readme.txt63B
CamelCrusher/CamelCrusherMac-1-0-1.dmg
- SHA256 aa9a585f857e00e15b30384355514369f89a6e5be38e90dd7d804d287cbf78c7
- MD5 888e12a19d82584b3e5848a6b7668fad
- SHA1 152bd118b864a877a6e93874fffb54e7970cb94d
- SHA512 63ab24538d2aeb439d22b28fa35be08ed96a6937855424f7a9a42a31351f36a2d57bb018dc508207afc633aa9eeb7b1c29d10fd68a30313e4758a3a744aaa02c
- SSDEEP 98304:64V1Ao/kPjlToP0Q7tnHKOIpNwOEpNDqZ28JGC7Sd4bIn3mZTAoi1CLPmVHAov3i:FVD9nHKOarsVdtFpQxv
- TLSH T163076B03FB5946ABC887003C516F162A6765FDC5D130CA966F80EE3AEFB3618FA07645
- MD5 SHA1 SHA512 SSDEEP TLSH
CamelCrusher/CamelCrusherWin-1-0-1-x32.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 aa8f393e30891dae7cb30f699db4d5c7d92e36d1308889cd68393b7f1931a97f
- MD5 aec68e3b883dd81fb73ee40319990e31
- SHA1 7193297fc5116c4e908ad5937da4142e314f6314
- SHA512 9ba0ae1fcde5791a918a2fa72f0fea719792e7b08a24d3fb8f217b8a9c5852bb11d72a4bfcd154f2e800b566293cf4d3bb45dd9afa0a5f3624f0776729538217
- SSDEEP 49152:LLdZIBuwr3TKQ9eByp6VHVTUVVo+AA/mbLdr:LLIBuwyQ9Vp6YVzAombLF
- TLSH T101B5CF10BA86C2B1E5AF01F949BEBA0D9279EF41076522D3F7C4BA5F4E31BD12D31246
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
CamelCrusher/CamelCrusherWin-1-0-1-x64.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 76eb202284796d258bed9057921f5b72cb5a1b30fb0671f4b5af402e9d713053
- MD5 6f4547b4f8133768a0ab25a68c813e77
- SHA1 d877a5e5a5535272afd3c2f6cffbe17640429609
- SHA512 d5d0eccf25ee5b50655d2a144ccbc13a7df1692d8ad14b327ca794101d1f0be7ce7d4a5cdff33aa35356659e5237cd140dbc2bdca34ac7df3100897889d0d29f
- SSDEEP 24576:qfyq93DySYvloLdZD6wzGfXey9jKNW/J1a9oE5BVFTUoHPvDpzxGVCsvCaY+AA/5:6LdZOwzGXJq5B3TmVVo+AA/mmLdr
- TLSH T13275AE46B6A142E6D063C17D8A93EA1AE3B1FC04175157C723D4FB692E37BD48E3A321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
CamelCrusher/readme.txt
- SHA256 b968a94ef1872bf41376a0c495ebfd36142b6f75161d37735e136999dcf65280
- MD5 789b8f148a371fc7465573f083ce6f5e
- SHA1 42ec31dedd1184995a422dbd928249fd0cbe4962
- SHA512 afab25e6a76658a67a43b064c3a48aa1cddec5dfb5d7c8e88ef81e3e319c1ac39fa1c4824406723fee038603d611f4fdd6bad7a5ceb3b3c620c8331f64f20ca9
- TLSH T1CCA00292D05CA46493A214EEB441E0996380A495C927114132DB92D5159E852B00882A
- MD5 SHA1 SHA512 TLSH