39026ee4d728f857d198146a2ee7dc2b9dc750c553f22516cdc7f85941e8bdd5

Sharing

Copy URL Twitter E-mail

General

Target
Crax64V5-2026.08.20.161709.zip
Size 5.8MB
Sample260905-xe98sszhna
SHA256 39026ee4d728f857d198146a2ee7dc2b9dc750c553f22516cdc7f85941e8bdd5
MD5 19e89455fb79c86b63c10f49ee4d1537
SHA1 e5dbb1c6368d3de16c77a1fd31e54a678f5c08a1
SHA512 1f8d83958770fdbd922776eb89dc356ab9a24bfdee9f1b86493f9e33e22b53aa7c02bee9eb46db84eed94a5bd008113273fa953f93fe843c28ac79b577916346
SSDEEP 98304:5w/Cx7F5wzQ4cf3SejMS/lD6RhB+f0IpE6sMxhSOv39wUgTmpNfwDPMBlcl9F/T:5w4nwszftMs2Rh8a6rb1wjE5wrMBWlHT
TLSH
T1E85633640C5A2A65FA305BFB3161B7D147569D3E30F701A7C88993111F2AA2D2F7C4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Crax64V5Installer.exe
- Size 8.0MB
- SHA256 5bda68190c59917e9123f58ca091ac31d64d5851a2e06d2c682f6268859b2027
- MD5 8ed5af46b68595672e420e7df9811cad
- SHA1 af636cdb0ca0ec33c5dc943c9cb6a98cc92fedb9
- SHA512 eaa2a4b46fe8ac047e968327a771f0b522e0ffb8cdfb1671c50dd3e736f498929b15afd9103cbbe3c066db1b790c4cbb982998c9e7cfb6e8095450584ae97d5e
- SSDEEP 49152:hXGnInDh7+nPUE7yaFjtPC7qqSqfv+Kk1LSSwWcGJn1wogrZPre8PlnaV9VhkF95:hXGIDhCcwxZn1wogrZTSkZSwF/hE
- TLSH
  T1CA864893ED9549E4CDAD853A886346623B307C4A5B2167D71B60F3293F7A7D01EBE380
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  CraxPlugins/dst.craxplugin.dll
- Size 196KB
- SHA256 be2c06e76a9eccf9da284a8216e28fd3dd9bcebcce076b8b0b456166b46252be
- MD5 4a77a1402e340d408361dcf8f68cc991
- SHA1 c902d4bf6479fbc32599a6a9ed22aaa8d5d34205
- SHA512 79b5b7448cc276f333065ea7082219e172438457fda34cccc58439b9dc1c96617395aecb89a1fe4353b907c38c321a8f39f935d21b5d2937853bdcba420b7d6e
- SSDEEP 3072:s9a93qGzE+1iOdsA55DzM21Z1mDht1MaFZEyLy4gUgf9Zqf2ge4b6Z:s9a93qMdiItA2L1a1hgy4Ugf9ZqPb4
- TLSH
  T162148D15F6A5507AE9278578C9530A02FB737C060760AAEF07504BB69F2FBE0A73E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CraxPlugins/photon-universal.craxplugin.dll
- Size 194KB
- SHA256 8f041e7629eefa9d397d172109223f29fc669adef5e8e1e4207aa8ed08fb2631
- MD5 ac8f1a1dfec7593a0fd4523b5ffdd26e
- SHA1 5d4b3c7c0510e64714ee460d05eea0b942cf0e39
- SHA512 2bb20db017d3abdb72721acfed33a2b08185078345ea366b9c82674c41270070a9a48b9b80124e3fada46976d36deea977bbc5d2534e0328a36f952ddb614fa7
- SSDEEP 3072:zdQJLml1zJCKigIPtWOmUJSrLiNs4N9ze0rB2QfBKDYAFCfJnF9ODKmY6:zdQJLmlNJpuoez++RH9ODKm
- TLSH
  T17E147E15F6A5007AED27C578C9434902EB727C4547A0AADF17900BFA9F2B7E0A73E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  CraxPlugins/playfab.craxplugin.dll
- Size 148KB
- SHA256 c47d34b6aea931d594560855bbbeec9d3d420109bc762593f87c7ccc9849c233
- MD5 3621bf6f74a8454455ecc66024091f35
- SHA1 8ca5f22bd83b9f6cb5ac49c330c1b02b5950e34b
- SHA512 88475ed085214195c1fdcaf0416186edcae0de114e5ddfc2de1e0591eff90cabfb72b54e79c4c2b62a17500c16d796d533546abc3084dc56e2fc5901c292ea23
- SSDEEP 3072:cagrvVULMCd07eZ2mNViJk2PIyzmign4S4+Tn4UC:GfCJTUk2IyI
- TLSH
  T10DE35A47B3A940BBE173D27989A31642EB72781507609BEF03A0437A1F277D49D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  CraxPlugins/raft-party.craxplugin.dll
- Size 184KB
- SHA256 a90643c1f9cbbfae778b7e0c0d3c035c02e04226209b0ccdd1603c32d7380339
- MD5 c1228abe486e1380cc6f2a05c445e578
- SHA1 387b0df9cda5daaccbb0608dfcd26629bf117378
- SHA512 e80bb3dddd68f49a830ed2040f9b24be9ef251ce217bac20f54022ffdf6fb8ce6d70a43c76dca6ef49409c8e6a6967f3053755a164c89612a37663276ec8c740
- SSDEEP 3072:HUndsP2KNBwKtefV35PEEvlwNXemxs9Zp7QZ+sGnOKn:HUdg2a0l5E42578vVXTn
- TLSH
  T135047B05F6A500BAE9678538C9434A01EA727C4607A0AADF17904FFA9F3F7D4A73E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  CraxPlugins/riftstorm.craxplugin.dll
- Size 148KB
- SHA256 7c3ab114d7a5a4aa04b00f9943d9feb03784e84587f3577f58511ea43b414c23
- MD5 cff214519ae3d5670c953c40fbb207f9
- SHA1 270a7c69f1d28a7cda3913c813758a94298aa552
- SHA512 468669822f996f70466212f5ef15975800b1435974e7ebe1caaf0b00878b7d211bcd8ea868b5cf8bd745e2284b17ce39a89a5d2c61c047192485d3802cb18ef2
- SSDEEP 3072:pJfHCvFxRkjugP/oNP/71uka8mZgignAnWTL:pe3a3Qd19a8eW
- TLSH
  T1C4E35B47B3A900BBE573927989A31742E776781247609BEF03A0437A1F277D09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  CraxPlugins/soulbound.craxplugin.dll
- Size 337KB
- SHA256 0eac30b3b80b7d5d584a70b50d305657305523ad4809b4bff81f51375af662b0
- MD5 e23b9483ed32ffd14550f4706602e1ec
- SHA1 88d53e3784b410cb8db925f02fc58f503b609c5e
- SHA512 894f5574f9fac4fceba7090237cb55e161b67698fea939ca701145f05d92e74f43f7bdf7539d8d8901ea6d0193673bcac3f4a43b53586f308cf646729cc7e616
- SSDEEP 6144:QPG/5WdAzjG6YCxcIgjzJ+1qwKze+YHdq9laQfm/N0:zPlncTjeB3+Y485O
- TLSH
  T183747C19E7A810B9E167C17CCA634905EBB2BC064361AADF13A04E572F37FE4963E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  CraxPlugins/unity-auth.craxplugin.dll
- Size 183KB
- SHA256 a65ab976ccd4cdc27ae99f76d032391c52848f7d68d9385be1f33a9b05f46a87
- MD5 81bf393e761ff646d7e1993adf035d44
- SHA1 5b41fad1f9ee34955ec17bd97382a0da36cf5566
- SHA512 8f26f8b4179235f192dbc33f16ddc3529e0eb2417a813e66f1669a5896d0ceedea6585c4891a25d2b89f1ca31a7a90b10d11c008308b606fdd8161a71e0dcc89
- SSDEEP 3072:bQbHnS60+OojDQvyjezyY9MNNeAZ/TOyNCNlX7v:bQbHnSBhqS21JZPA
- TLSH
  T1D1047C15F6B510BBEA27C538C9434905EA72BC450760AAEF07904BF69F2F7D0A63EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  CraxPlugins/wreck-runners.craxplugin.dll
- Size 152KB
- SHA256 61ddfe2c1502748dc3a1935c007bfd3c10ac3035bb20362ba0b3a1779f11ced2
- MD5 def80293aceefff7aa2f434cd1b938b1
- SHA1 ad4de82c98c6813512081a1651a052060b98e1cb
- SHA512 5ea2bd9e8fb74dffc2025e4dfbc7b60abb094b1fe8d84d2afa4b8bd72bd2475d1890e704b8d78adfb1d6f0007a9eeb00c08f5cbb307157e5428046b43c3b1521
- SSDEEP 3072:GZ1lxEbbdmUbb+uE8WgNZwUh4obHIZOxbPFjF:5bbI+LtWgHWobHIU
- TLSH
  T13AE35C17B3EA04BBD1739239C9A30645E772B8150B619AEF03A0437A1F277D49D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  RedpointEOS/EOSSDK-Win64-Shipping.of
- Size 866KB
- SHA256 c57be455d8f416d92045683e3d57361d07fddb284355445724be9de15c83cd41
- MD5 3a099cd578005287c00b001730226a50
- SHA1 6f10fd6a456d7815cdfdf591c8ce6090c573952e
- SHA512 f91bab34dc7a16f66edc3028a86b092a8ec975823d3f72856065cc3981665f1d78db0752026cc57c0ed22b86dd36eeca6b10d2475e2af1a130eabf7cff42ca90
- SSDEEP 24576:dZ+0CnXy9cxF3c6qbsrAy+pbO2c3VEAyiAygV:dZ+0CnXc6qbsX+sP3
- TLSH
  T163155C26AA6801ACD0B7D1B98E539802F7B1B44B03357ECF03A059663F277E5577BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  crax64.dll
- Size 1.0MB
- SHA256 51d192adc2ba3d209c4c0269530f6a21ae29c940a5198d7ea0730059fc69732c
- MD5 f4e128d062f2f109c056f3f062f25b1c
- SHA1 5b1065110fda4d1c275ff8f139a22128f7eb4e60
- SHA512 93e7063cf99549da34a71b96731b703901fbaa929dc981eed21779239cdc118fbee49ee573ce00d9e6b5ccc2cf8e297a0231ad4511f261793f09b524b08025f8
- SSDEEP 12288:NXchXQLUYDACc3tZ+OL2AMCUmTMJZLD5jxjJq+MXzUNJW4ZIHJv:oMUYDACc3toA1IZFxjJq+MjUnH4
- TLSH
  T105354A26A658007CD1BAD1F8CF27A803E275744A03347EDF07A059A26F17EE8567FB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  winmm.dll
- Size 192KB
- SHA256 eab1d3f9bbf329fffdff64033f5c09af4af09bde0f82397035ea22d6bd35bd07
- MD5 8c8dfeb6015004c4ae240d76ca47ddd3
- SHA1 dcc6b1b1ee51d247ae41f7d7b52e0e45d75a97e0
- SHA512 8ed9fc26d28912d8491a5d4134dd461886bd3c3d8937c6f24c008c8b2e5538614ee1bc1c86004335eb3e5e441d8b6bbe2f328ae64afbe33a354cc4f9ff34015e
- SSDEEP 3072:kyn+ts1K1YBZyClfkFjPT/TM10d24W4ne4DQw0vvsQ9lSA:kyn+toZnCLbO6ND1akA
- TLSH
  T159149E1277B400BAEC73923888931649E672B81647209BDF13909775EF6FBD2723DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  x86/CraxPlugins/dst.craxplugin.dll
- Size 152KB
- SHA256 6fed5885fb83ef78a3974f3637ef5f1fe4f569f81d10d1a0409ec8db69063441
- MD5 401947042cb0042d3a07bba438c604a7
- SHA1 774ec3792997546b5f78ab99e390d908b65d62f1
- SHA512 bc1c74a07fcdf9f4aa701dd1e8874299bb97279085985a9c0c254f88afa46e8c62540859131e0ae1bdce5c54480ec89d907f9efd06a2cc2ff350256b72725e86
- SSDEEP 3072:7z8ofsRw4I8Roz+wsGIt778YRLl51spcjX6gjMCTTEpd7f9Zjry4wR1C:7XzfK78+h5ecjX7jM2gP7f9ZAC
- TLSH
  T1D3E38D10F881D037DAAE0C3899348E668E2F6CA18FD4ADC777945EEA4D746C09B39707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  x86/CraxPlugins/photon-universal.craxplugin.dll
- Size 149KB
- SHA256 290f2c432f1a7a96178e83b96d188347388946cd5f0e2cc02add6410e48873fc
- MD5 27899e76e31e2a971265b1fd44243104
- SHA1 f50378af0574d35d0a0c8f422106bedcb1543540
- SHA512 a87fc2d19d3152fbafa36c18e0550a61f32ba5b8f0b1684c793138a839e702f9cc1ff7ca0a543bf6d6a49e42aafab8ddadf762fbab95a8d2d0acc50e4ce2c66b
- SSDEEP 3072:S0LSJHM8uLwpfQbq7OGZy6/mjakAi3QfRKDBclPo4hC2Zi:S0l8uLy7OGQ6/qxTMfZi
- TLSH
  T1F4E37E11F981C037DA7E1C3459789E768E3E68618BE0ADCBBB941DE94D306D0AB39707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  x86/CraxPlugins/playfab.craxplugin.dll
- Size 113KB
- SHA256 3a901ff3618c6fbd288757cc22a18656e762a4560c400281a2792cbe95d8c98c
- MD5 4769faa4b77f1930301edc28fcc7a2c4
- SHA1 50fc240a3444c8520b1624a404423c376ddbd09c
- SHA512 daa0890b8a5af3752500b63850a7969876b9114bb2d991217121cd7f3379ea075fafe00a6c545b03255f5651013f3701078b6395f232b87c45bcc8b2058b36a5
- SSDEEP 3072:AT+Iszev/+39xKm1iO5zWHCcRCMmf40WgVY:RIh/+39x51i2mPRiBu
- TLSH
  T1D7B38D41B680C471D8BE19390478CF76473E7830DF949EDBA79416BA9F342C0AE35A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  x86/CraxPlugins/raft-party.craxplugin.dll
- Size 143KB
- SHA256 19482fccf60e61d9437d9a678b370d0946ef7b98443baab60626fef5a336187e
- MD5 0e3828ca084a4a42e29e13e6bd7295b1
- SHA1 099742125d8896aabf22238dfe7b352050176893
- SHA512 3d76102099cff5d29537567f0a34148846e4e56fcb54042715aee5da8d76671dd82aa9690f4f88bba7429a3881b62d139efd1458e499f3e6f3b5c8e209e41306
- SSDEEP 3072:cRSidTnyRvdsBF8mJZ+qqiFsjMTjur6Ub5pl4Ekdp+:cDTy4mmJZBqiqjMv6XbJap+
- TLSH
  T163E37D01F841C033D6AE1D3945699B259F3E6C60DFE4ACDBA7881DEA4E306D09F39A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32