General
- Target CrytalTempCracked.exe
- Size 1.0MB
- Sample260806-ner8jstxfw
- SHA256 b1011a92f0c763f1a55975f853e1ec68f2d74514df6b1858c3ea7c994d8bdb82
- MD5 3bfcf3f9ad3c0ab57e1f7b5875f6c3eb
- SHA1 505f34642d30e28a0d4ab25cf2ddccbd5d8efb90
- SHA512 776e431497341199c625646f26e72e7f13709d8f7e6f5f9cf5470e84e6e903d68e4920bc904066436b3ca41d82a2e46fcd182866a396672893f0c6241fa8a084
- SSDEEP 24576:p0sBpxxpwjJYZ6S/6alOjYDE/dMgAG//U6X8OgIb40N6TVxbz:p0sBvxpwCPpOhLAG//U6X8OgIbdN6bb
- TLSH T132358D5A67B801E9D1BBD17CC6678607E7B270491330ABDF02E086A51F13BE16B3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CrytalTempCracked.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CrytalTempCracked.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
CrytalTempCracked.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target CrytalTempCracked.exe
- Size 1.0MB
- SHA256 b1011a92f0c763f1a55975f853e1ec68f2d74514df6b1858c3ea7c994d8bdb82
- MD5 3bfcf3f9ad3c0ab57e1f7b5875f6c3eb
- SHA1 505f34642d30e28a0d4ab25cf2ddccbd5d8efb90
- SHA512 776e431497341199c625646f26e72e7f13709d8f7e6f5f9cf5470e84e6e903d68e4920bc904066436b3ca41d82a2e46fcd182866a396672893f0c6241fa8a084
- SSDEEP 24576:p0sBpxxpwjJYZ6S/6alOjYDE/dMgAG//U6X8OgIb40N6TVxbz:p0sBvxpwCPpOhLAG//U6X8OgIbdN6bb
- TLSH T132358D5A67B801E9D1BBD17CC6678607E7B270491330ABDF02E086A51F13BE16B3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1