7b49683b2b0836b76b258cae4198d23e9097e0916821523016f22dd6d359137c

Sharing

Copy URL Twitter E-mail

General

Target
Nouveau ZIP archive.zip
Size 5.7MB
Sample260905-w67rbaxvbz
SHA256 7b49683b2b0836b76b258cae4198d23e9097e0916821523016f22dd6d359137c
MD5 ce5ab4535f0d41edc8018304f716070d
SHA1 9c3543d937f56acb48f1d2877cb74bcab5723168
SHA512 0b57fbeb92b823f1b7f041e6f2b5c494982567ead72732b1de0f00fe935466cd5d38fb9602292339761d1ebbe9e1cc978990547d2713313e8c7ef78bb40d2ed5
SSDEEP 98304:OWr8MvSB4y8PxX8CmLLZNrR9fWWarBMVhUW8Ho9wW1/PhVMsHzwVCV:OWr8MqBvLTKrOnkGPrSdVCV
TLSH
T1445633BC907210ADF78C94B7518C0811F40DAF716412E86E1DB4F438F76E6ABEA97D29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  Crax64V5-2026.08.20.161709/Crax64V5-Install.ps1
- Size 52KB
- SHA256 124a8fcdf86479bdcbbbc13a868a5c33c1895e7c30b98702e0d1ed6471c13d9e
- MD5 33eda0510554b856cc7627d115c6e8ee
- SHA1 939a4b25b00e8c0690a42a090d1b89dddd149d53
- SHA512 ba4822600c37deb87325a62a7e3e67ca63b298e89afb67c5fa9474f0802aef515812b532aa07604a2bade2db3d90908c4af59d67e36698c361a898d870b7fa30
- SSDEEP 768:B1g0LGhd6M6ZOD9EfS05kgXxqBJQPBUjc2JzoGen:BJ0l6ZOD9E6wqBSP+g2JzoGen
- TLSH
  T1073372147ED455BB26C7A26D18D44448FA2A152F64086F00BC9C93C5FFA673C8BFCBA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Crax64V5-2026.08.20.161709/Crax64V5-Installer.bat
- Size 633B
- SHA256 237317ea916a343bc5451b49c86d037dd3ec23c912dadd7235e2bf07a4d12fdf
- MD5 f4bfa61b4e58c408db0bc816a45f5a87
- SHA1 11e9c5661b4d68fee071e72f111c55525c49b775
- SHA512 feba3a36a3abfffa34038137c11cfdfd77ac9eaa513566a82f3efca83b095ceb95371ef2909a1ed21f88d32954bc0e801c22b0242389e7dd4892ec6754b01997
- TLSH
  T1EFF005494199527E3D87891DD091D4945038A990D341E300389341ED0A74718C7DA1C3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Crax64V5-2026.08.20.161709/Crax64V5Installer.exe
- Size 8.0MB
- SHA256 5bda68190c59917e9123f58ca091ac31d64d5851a2e06d2c682f6268859b2027
- MD5 8ed5af46b68595672e420e7df9811cad
- SHA1 af636cdb0ca0ec33c5dc943c9cb6a98cc92fedb9
- SHA512 eaa2a4b46fe8ac047e968327a771f0b522e0ffb8cdfb1671c50dd3e736f498929b15afd9103cbbe3c066db1b790c4cbb982998c9e7cfb6e8095450584ae97d5e
- SSDEEP 49152:hXGnInDh7+nPUE7yaFjtPC7qqSqfv+Kk1LSSwWcGJn1wogrZPre8PlnaV9VhkF95:hXGIDhCcwxZn1wogrZTSkZSwF/hE
- TLSH
  T1CA864893ED9549E4CDAD853A886346623B307C4A5B2167D71B60F3293F7A7D01EBE380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/dst.craxplugin.dll
- Size 196KB
- SHA256 be2c06e76a9eccf9da284a8216e28fd3dd9bcebcce076b8b0b456166b46252be
- MD5 4a77a1402e340d408361dcf8f68cc991
- SHA1 c902d4bf6479fbc32599a6a9ed22aaa8d5d34205
- SHA512 79b5b7448cc276f333065ea7082219e172438457fda34cccc58439b9dc1c96617395aecb89a1fe4353b907c38c321a8f39f935d21b5d2937853bdcba420b7d6e
- SSDEEP 3072:s9a93qGzE+1iOdsA55DzM21Z1mDht1MaFZEyLy4gUgf9Zqf2ge4b6Z:s9a93qMdiItA2L1a1hgy4Ugf9ZqPb4
- TLSH
  T162148D15F6A5507AE9278578C9530A02FB737C060760AAEF07504BB69F2FBE0A73E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/photon-universal.craxplugin.dll
- Size 194KB
- SHA256 8f041e7629eefa9d397d172109223f29fc669adef5e8e1e4207aa8ed08fb2631
- MD5 ac8f1a1dfec7593a0fd4523b5ffdd26e
- SHA1 5d4b3c7c0510e64714ee460d05eea0b942cf0e39
- SHA512 2bb20db017d3abdb72721acfed33a2b08185078345ea366b9c82674c41270070a9a48b9b80124e3fada46976d36deea977bbc5d2534e0328a36f952ddb614fa7
- SSDEEP 3072:zdQJLml1zJCKigIPtWOmUJSrLiNs4N9ze0rB2QfBKDYAFCfJnF9ODKmY6:zdQJLmlNJpuoez++RH9ODKm
- TLSH
  T17E147E15F6A5007AED27C578C9434902EB727C4547A0AADF17900BFA9F2B7E0A73E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/playfab.craxplugin.dll
- Size 148KB
- SHA256 c47d34b6aea931d594560855bbbeec9d3d420109bc762593f87c7ccc9849c233
- MD5 3621bf6f74a8454455ecc66024091f35
- SHA1 8ca5f22bd83b9f6cb5ac49c330c1b02b5950e34b
- SHA512 88475ed085214195c1fdcaf0416186edcae0de114e5ddfc2de1e0591eff90cabfb72b54e79c4c2b62a17500c16d796d533546abc3084dc56e2fc5901c292ea23
- SSDEEP 3072:cagrvVULMCd07eZ2mNViJk2PIyzmign4S4+Tn4UC:GfCJTUk2IyI
- TLSH
  T10DE35A47B3A940BBE173D27989A31642EB72781507609BEF03A0437A1F277D49D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/raft-party.craxplugin.dll
- Size 184KB
- SHA256 a90643c1f9cbbfae778b7e0c0d3c035c02e04226209b0ccdd1603c32d7380339
- MD5 c1228abe486e1380cc6f2a05c445e578
- SHA1 387b0df9cda5daaccbb0608dfcd26629bf117378
- SHA512 e80bb3dddd68f49a830ed2040f9b24be9ef251ce217bac20f54022ffdf6fb8ce6d70a43c76dca6ef49409c8e6a6967f3053755a164c89612a37663276ec8c740
- SSDEEP 3072:HUndsP2KNBwKtefV35PEEvlwNXemxs9Zp7QZ+sGnOKn:HUdg2a0l5E42578vVXTn
- TLSH
  T135047B05F6A500BAE9678538C9434A01EA727C4607A0AADF17904FFA9F3F7D4A73E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/riftstorm.craxplugin.dll
- Size 148KB
- SHA256 7c3ab114d7a5a4aa04b00f9943d9feb03784e84587f3577f58511ea43b414c23
- MD5 cff214519ae3d5670c953c40fbb207f9
- SHA1 270a7c69f1d28a7cda3913c813758a94298aa552
- SHA512 468669822f996f70466212f5ef15975800b1435974e7ebe1caaf0b00878b7d211bcd8ea868b5cf8bd745e2284b17ce39a89a5d2c61c047192485d3802cb18ef2
- SSDEEP 3072:pJfHCvFxRkjugP/oNP/71uka8mZgignAnWTL:pe3a3Qd19a8eW
- TLSH
  T1C4E35B47B3A900BBE573927989A31742E776781247609BEF03A0437A1F277D09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/soulbound.craxplugin.dll
- Size 337KB
- SHA256 0eac30b3b80b7d5d584a70b50d305657305523ad4809b4bff81f51375af662b0
- MD5 e23b9483ed32ffd14550f4706602e1ec
- SHA1 88d53e3784b410cb8db925f02fc58f503b609c5e
- SHA512 894f5574f9fac4fceba7090237cb55e161b67698fea939ca701145f05d92e74f43f7bdf7539d8d8901ea6d0193673bcac3f4a43b53586f308cf646729cc7e616
- SSDEEP 6144:QPG/5WdAzjG6YCxcIgjzJ+1qwKze+YHdq9laQfm/N0:zPlncTjeB3+Y485O
- TLSH
  T183747C19E7A810B9E167C17CCA634905EBB2BC064361AADF13A04E572F37FE4963E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/unity-auth.craxplugin.dll
- Size 183KB
- SHA256 a65ab976ccd4cdc27ae99f76d032391c52848f7d68d9385be1f33a9b05f46a87
- MD5 81bf393e761ff646d7e1993adf035d44
- SHA1 5b41fad1f9ee34955ec17bd97382a0da36cf5566
- SHA512 8f26f8b4179235f192dbc33f16ddc3529e0eb2417a813e66f1669a5896d0ceedea6585c4891a25d2b89f1ca31a7a90b10d11c008308b606fdd8161a71e0dcc89
- SSDEEP 3072:bQbHnS60+OojDQvyjezyY9MNNeAZ/TOyNCNlX7v:bQbHnSBhqS21JZPA
- TLSH
  T1D1047C15F6B510BBEA27C538C9434905EA72BC450760AAEF07904BF69F2F7D0A63EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Crax64V5-2026.08.20.161709/CraxPlugins/wreck-runners.craxplugin.dll
- Size 152KB
- SHA256 61ddfe2c1502748dc3a1935c007bfd3c10ac3035bb20362ba0b3a1779f11ced2
- MD5 def80293aceefff7aa2f434cd1b938b1
- SHA1 ad4de82c98c6813512081a1651a052060b98e1cb
- SHA512 5ea2bd9e8fb74dffc2025e4dfbc7b60abb094b1fe8d84d2afa4b8bd72bd2475d1890e704b8d78adfb1d6f0007a9eeb00c08f5cbb307157e5428046b43c3b1521
- SSDEEP 3072:GZ1lxEbbdmUbb+uE8WgNZwUh4obHIZOxbPFjF:5bbI+LtWgHWobHIU
- TLSH
  T13AE35C17B3EA04BBD1739239C9A30645E772B8150B619AEF03A0437A1F277D49D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Crax64V5-2026.08.20.161709/RedpointEOS/EOSSDK-Win64-Shipping.of
- Size 866KB
- SHA256 c57be455d8f416d92045683e3d57361d07fddb284355445724be9de15c83cd41
- MD5 3a099cd578005287c00b001730226a50
- SHA1 6f10fd6a456d7815cdfdf591c8ce6090c573952e
- SHA512 f91bab34dc7a16f66edc3028a86b092a8ec975823d3f72856065cc3981665f1d78db0752026cc57c0ed22b86dd36eeca6b10d2475e2af1a130eabf7cff42ca90
- SSDEEP 24576:dZ+0CnXy9cxF3c6qbsrAy+pbO2c3VEAyiAygV:dZ+0CnXc6qbsX+sP3
- TLSH
  T163155C26AA6801ACD0B7D1B98E539802F7B1B44B03357ECF03A059663F277E5577BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Crax64V5-2026.08.20.161709/crax64.dll
- Size 1.0MB
- SHA256 51d192adc2ba3d209c4c0269530f6a21ae29c940a5198d7ea0730059fc69732c
- MD5 f4e128d062f2f109c056f3f062f25b1c
- SHA1 5b1065110fda4d1c275ff8f139a22128f7eb4e60
- SHA512 93e7063cf99549da34a71b96731b703901fbaa929dc981eed21779239cdc118fbee49ee573ce00d9e6b5ccc2cf8e297a0231ad4511f261793f09b524b08025f8
- SSDEEP 12288:NXchXQLUYDACc3tZ+OL2AMCUmTMJZLD5jxjJq+MXzUNJW4ZIHJv:oMUYDACc3toA1IZFxjJq+MjUnH4
- TLSH
  T105354A26A658007CD1BAD1F8CF27A803E275744A03347EDF07A059A26F17EE8567FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Crax64V5-2026.08.20.161709/winmm.dll
- Size 192KB
- SHA256 eab1d3f9bbf329fffdff64033f5c09af4af09bde0f82397035ea22d6bd35bd07
- MD5 8c8dfeb6015004c4ae240d76ca47ddd3
- SHA1 dcc6b1b1ee51d247ae41f7d7b52e0e45d75a97e0
- SHA512 8ed9fc26d28912d8491a5d4134dd461886bd3c3d8937c6f24c008c8b2e5538614ee1bc1c86004335eb3e5e441d8b6bbe2f328ae64afbe33a354cc4f9ff34015e
- SSDEEP 3072:kyn+ts1K1YBZyClfkFjPT/TM10d24W4ne4DQw0vvsQ9lSA:kyn+toZnCLbO6ND1akA
- TLSH
  T159149E1277B400BAEC73923888931649E672B81647209BDF13909775EF6FBD2723DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Crax64V5-2026.08.20.161709/x86/CraxPlugins/dst.craxplugin.dll
- Size 152KB
- SHA256 6fed5885fb83ef78a3974f3637ef5f1fe4f569f81d10d1a0409ec8db69063441
- MD5 401947042cb0042d3a07bba438c604a7
- SHA1 774ec3792997546b5f78ab99e390d908b65d62f1
- SHA512 bc1c74a07fcdf9f4aa701dd1e8874299bb97279085985a9c0c254f88afa46e8c62540859131e0ae1bdce5c54480ec89d907f9efd06a2cc2ff350256b72725e86
- SSDEEP 3072:7z8ofsRw4I8Roz+wsGIt778YRLl51spcjX6gjMCTTEpd7f9Zjry4wR1C:7XzfK78+h5ecjX7jM2gP7f9ZAC
- TLSH
  T1D3E38D10F881D037DAAE0C3899348E668E2F6CA18FD4ADC777945EEA4D746C09B39707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  Crax64V5-2026.08.20.161709/x86/CraxPlugins/photon-universal.craxplugin.dll
- Size 149KB
- SHA256 290f2c432f1a7a96178e83b96d188347388946cd5f0e2cc02add6410e48873fc
- MD5 27899e76e31e2a971265b1fd44243104
- SHA1 f50378af0574d35d0a0c8f422106bedcb1543540
- SHA512 a87fc2d19d3152fbafa36c18e0550a61f32ba5b8f0b1684c793138a839e702f9cc1ff7ca0a543bf6d6a49e42aafab8ddadf762fbab95a8d2d0acc50e4ce2c66b
- SSDEEP 3072:S0LSJHM8uLwpfQbq7OGZy6/mjakAi3QfRKDBclPo4hC2Zi:S0l8uLy7OGQ6/qxTMfZi
- TLSH
  T1F4E37E11F981C037DA7E1C3459789E768E3E68618BE0ADCBBB941DE94D306D0AB39707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32