General
- Target stelany_craftrise.exe
- Size 556KB
- Sample260805-yxqsjsvfnd
- SHA256 5273259316c50575bb6fe5daedc591bc1f24a55c4d68ca2256686b326f7a25d9
- MD5 550120d9a64278d7c0ec3077f7d3cc05
- SHA1 871cc57463588eeca25480e342062d9fe2eab989
- SHA512 f94d6d3b7f2535a5491a0569446e8bed7ea78cb27c7e560fc74d1619b99e9aa32db67450268f25c739445f1a66b118c0c27daa94c87238fa42ba986744f839b4
- SSDEEP 6144:KdjJ9Ho/kQhZxONDYVLVakHh8kLBz7c7KrpRtpp7amMPE9vDdm:K79Hgk4wYRBHdzbv
- TLSH T182C45A59A6E406E5DCB78038CF564B82E67138490760B6EB43E54AA25F372D04EFEF13
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
stelany_craftrise.exe
Resource
win10v2004-20260513-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
stelany_craftrise.exe
Resource
win11ltsc2024-20260709-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target stelany_craftrise.exe
- Size 556KB
- SHA256 5273259316c50575bb6fe5daedc591bc1f24a55c4d68ca2256686b326f7a25d9
- MD5 550120d9a64278d7c0ec3077f7d3cc05
- SHA1 871cc57463588eeca25480e342062d9fe2eab989
- SHA512 f94d6d3b7f2535a5491a0569446e8bed7ea78cb27c7e560fc74d1619b99e9aa32db67450268f25c739445f1a66b118c0c27daa94c87238fa42ba986744f839b4
- SSDEEP 6144:KdjJ9Ho/kQhZxONDYVLVakHh8kLBz7c7KrpRtpp7amMPE9vDdm:K79Hgk4wYRBHdzbv
- TLSH T182C45A59A6E406E5DCB78038CF564B82E67138490760B6EB43E54AA25F372D04EFEF13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger