General
- Target CrystalLauncherN.zip
- Size 1.6MB
- Sample260814-e1nb2svthw
- SHA256 727b11a6950df74ff6e42373ba7ac761a0bfe20eeb243a3117ea38f60e23ecdd
- MD5 ea0189b95f66c4f0c3a7beb9af18f8d1
- SHA1 75389a49b8cfc483a1b0c9b523734acccb277437
- SHA512 86207e30c090aa9175dc44ee408f27471b9714b8c051db6455f384388cb9806f38e242c75371527f84be0932b9d53a55f13c513ba00c6cf29df5cbf30c4a95d8
- SSDEEP 12288:PBChVyzNndzFWPYhv/JBdBS4msNUCe65frHMnz2R9Iyev5whgCX:PohondzFWPM/bdo4mz1U8z2MyevjCX
- TLSH T1F47571841A6AC913DA78C7FF8C6E39FEF2715C11B186D7DE0640B4A534D9E80A7812DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Zainstaluj_Crystal_Launcher.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zainstaluj_Crystal_Launcher.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Zainstaluj_Crystal_Launcher.exe
- Size 1.6MB
- SHA256 041344a56eecc303e538698321e0d1bd4c0e765691300b699e8d89bcf39dcb4b
- MD5 2bcf8f6eda4deab1666f98ddb6bc974f
- SHA1 75b48b1480e7aada99f333684f78af61f2a2aa45
- SHA512 1850bfc9fa97a07072297bce46afd148b7fd645b46c13da6c803187785082394584062c532006c285e4ad4b0e5d89f3670a4a999e48fdbe923eb8b6d6a623cdc
- SSDEEP 12288:BBChVyzNndzFWPYhv/JBdBS4msNUCe65frHMnz2R9Iyev5whgC:BohondzFWPM/bdo4mz1U8z2MyevjC
- TLSH T1677571841A6AC913DA78C7FF8C6E39FEF2715C11B186D7DE0640B4A534D9E80A7812DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL