Overview

overview

7

Static

static

3

Cozycraft.exe

windows10-2004-x64

7

Cozycraft.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$TEMP/vcre...15.exe

windows10-2004-x64

4

$TEMP/vcre...15.exe

windows11-ltsc_2024-x64

4

Uninstall.exe

windows10-2004-x64

7

Uninstall.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

zomercozycraft.exe

windows10-2004-x64

1

zomercozycraft.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Cozycraft.exe
  • Size 64.6MB
  • Sample260807-1whrnadj7y
  • SHA256 cd7912601c361374032a1a356e535ddbc474516860aad86d754fde30a90c88ec
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      Cozycraft.exe
    • Size 64.6MB
    • SHA256 cd7912601c361374032a1a356e535ddbc474516860aad86d754fde30a90c88ec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 15KB
    • SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 60d4a86f65e141d4b6b778e5f448a0c818bd2fa28db7b9dabc1395d354b19cc5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $TEMP/vcredist_x86_2015.exe
    • Size 13.1MB
    • SHA256 fdd1e1f0dcae2d0aa0720895eff33b927d13076e64464bb7c7e5843b7667cd14
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral7behavioral8
    • Target
      Uninstall.exe
    • Size 71KB
    • SHA256 3bbc0098123222ba2c99e97b452372eb2aada2dbfd20abfdcf32943af8f57483
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    behavioral10behavioral9
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 15KB
    • SHA256 f90a0893c0b0ce2ae3f8bb65f383bf656ce33381d6cbac2b25a7d82b34fde9bd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 60d4a86f65e141d4b6b778e5f448a0c818bd2fa28db7b9dabc1395d354b19cc5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      zomercozycraft.exe
    • Size 12.0MB
    • SHA256 b6a9f6a49e46649d66c98d4ac6ebf1b2dba66902770584e9b627bd978e64d935
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks