General
- Target crackme_cracked_by_xtrexx.exe
- Size 63.7MB
- Sample260812-m4fqdavflb
- SHA256 6aee4acf983333c8cd059e11bf4aecfb2108d6c41bc46a40f41db6bebf7905cf
- MD5 bfef10ccf43024147c80218ff9308e5f
- SHA1 06a8787f077ae8b7663a3e7f8a14e11a7cede765
- SHA512 e7ff85948921a8673ca4c35ada2971cd5cbb34ad76abd0c1506deb2e564bd6d57d2b4bc7c4a4136314f0c0e7fb554afb0c47c8e5aefda4f31656c9a28ad71ad4
- SSDEEP 786432:NtxviLi13+fJANvRgX97VlQ7G7JPt8ga0iBY:NtxviLip+fJAIX97bQ7G7J
- TLSH T1A0E7724C24500AE4915BE815EAABCF1B5FE9DADB5BE8244DBCA88E740CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
crackme_cracked_by_xtrexx.exe
Resource
win10ltsc2021-20260513-en
7 signatures
30 seconds
Malware Config
Targets
-
- Target crackme_cracked_by_xtrexx.exe
- Size 63.7MB
- SHA256 6aee4acf983333c8cd059e11bf4aecfb2108d6c41bc46a40f41db6bebf7905cf
- MD5 bfef10ccf43024147c80218ff9308e5f
- SHA1 06a8787f077ae8b7663a3e7f8a14e11a7cede765
- SHA512 e7ff85948921a8673ca4c35ada2971cd5cbb34ad76abd0c1506deb2e564bd6d57d2b4bc7c4a4136314f0c0e7fb554afb0c47c8e5aefda4f31656c9a28ad71ad4
- SSDEEP 786432:NtxviLi13+fJANvRgX97VlQ7G7JPt8ga0iBY:NtxviLip+fJAIX97bQ7G7J
- TLSH T1A0E7724C24500AE4915BE815EAABCF1B5FE9DADB5BE8244DBCA88E740CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger