crackedmitacg.rar
- SHA256 44ef2d28f931d344921d80257a69ad23d80bf3543ab527123e8e85aeebc5dd6f
Overview
overview
7Static
static
3crackedmitacg.rar
windows10-2004-x64
7crackedmitacg.rar
windows11-ltsc_2024-x64
7crackedmit...ed.exe
windows10-2004-x64
5crackedmit...ed.exe
windows11-ltsc_2024-x64
5crackedmit...ly.ps1
windows10-2004-x64
3crackedmit...ly.ps1
windows11-ltsc_2024-x64
3crackedmit...ke.ps1
windows10-2004-x64
3crackedmit...ke.ps1
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
crackedmitacg.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
crackedmitacg.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
crackedmitacg/Unbranded.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
crackedmitacg/Unbranded.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
crackedmitacg/patch_only.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
crackedmitacg/patch_only.ps1
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
crackedmitacg/tlsfake.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
crackedmitacg/tlsfake.ps1
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target crackedmitacg.rar
- Size 25.4MB
- Sample260910-p5fswateng
- SHA256 44ef2d28f931d344921d80257a69ad23d80bf3543ab527123e8e85aeebc5dd6f
- MD5 df6da63f459840e31989673d8d3cb011
- SHA1 ca33132ca7ea0d42109737ee9b24549703a0c53b
- SHA512 f3d52f34e360a63260e2e28ab31ef4e1772e629851c7678b3a869ff16be306e1baa8c883e42d583f635ece0ee08ee1f07bec1ce9c1a3ef721ee06855ee5fc3ce
- SSDEEP 786432:mJWOAFBxMah2PFGuaAdaXFenoHJtE90L8Yooq0:mJ0/xQoAdaXFeoptNooq0
- TLSH T1144733E3ADF81D4773B5D7855A8FCA280B7C5E804E97FBFE30039751B8A4A521A20536
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/crackedmitacg/Unbranded.exe
File Explorer
-
crackedmitacg.rar.rar 25.4MB
-
crackedmitacg/Unbranded.exe.exe 27.5MB
-
crackedmitacg/patch_only.ps1.ps1 5KB
-
crackedmitacg/tlsfake.ps1.ps1 7KB
crackedmitacg/Unbranded.exe
- IMPHASH 072cb0121a5f9cb7958b0e595768a232
- SHA256 4c30b8f181d5ba6648d44dd6751290bd88541e61bc95753bff3274d8e9418298
- MD5 54b2d9eb81b690d5a90d80bedf0f5a6e
- SHA1 b541ca2526bf2e31ef92e7060307aef36552e287
- SHA512 aa158523b74a1a1705f81d79d394a497cc041086a9cab1f9d33784bfd257e642272fe95141144aa4efbeb15fafe4993c0ec7c5650da4efb52410658043091225
- SSDEEP 393216:ykegrd56xJHLfrNI/wxpwGTBs2iEXGFW3lw5jJGRvPrADG7h10u6kG7ZNbmF:yZbfrTNw3GT7iE53k0mCkuyZRw
- TLSH T1A05733D562C853D8D7C38840734E92EBE0D3793A56EB94247AC72C039630DEA5A4ADF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
46899648
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDevice
dcomp
DCompositionCreateDevice
d3dcompiler_47
D3DCompile
kernel32
GetCurrentThread
user32
GetKeyState
advapi32
RegCloseKey
shell32
ShellExecuteA
msvcp140
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
winhttp
WinHttpReceiveResponse
bcrypt
BCryptEncrypt
crypt32
CryptStringToBinaryA
iphlpapi
GetAdaptersInfo
imm32
ImmSetCompositionWindow
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
api-ms-win-crt-string-l1-1-0
tolower
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
api-ms-win-crt-math-l1-1-0
cosf
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
. u>
Size
Virtual Size
20.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.|mZ
Size
512B
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.,?c
Size
27.5MB
Virtual Size
27.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
469B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
crackedmitacg/patch_only.ps1
- SHA256 ad795301c79ad6de3023fe252a13bf3f3a920fc7b1cfc47e8e9104adfd06ae58
- MD5 b16bec27ac0d701e5e3f316f34c38d2a
- SHA1 9b3688f9ba89809e6ee12a485c51cdb556771d30
- SHA512 5cdfabe26f08702b46db0b14457594558862aac0f4d2a5a2b37bce001b46df28e48f31e161723b77cc8a47cce84b286465ec1dea7063b485f214324287c55b5b
- SSDEEP 96:HmjMCZzaCA+Yj3lAyZEaFCfnLhyiSA6YhOf4x25YlNYzGrSPhg:cZzaCTSltFCfnLhyiSA6YhOf4x25YlNx
- TLSH T11DB133105657AE2B41F2350FDBCFD45EF527513364A6EE407AEC46B0AF920A48135A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
crackedmitacg/tlsfake.ps1
- SHA256 7d0c513d2594137378a9cc74058e24d790e20c8848a0d4fd8604ee884bcfec4a
- MD5 6853b6a0ccfe6ae568f077de7cc8a6f3
- SHA1 562ae3ee6acb0d34c1dee440eca20782e21b709a
- SHA512 7dd16656caf84dacb87cec9907c8a0f7b108d606df4162a09d62fb27ca0d85540089a5f334cc5606c91ece4039c10bfb26694e3f0048e5d4cee34fe06c3d21be
- SSDEEP 192:MtJrehm2gtEOFqzy+sk/IyEWp64DeyceEPJVAfPKx6KkD:aWxgjMLFy3bm
- TLSH T1BCE18254B7C9D8A947C3316E9956D9487639C22B0089BD0077CEC6C8AFA4E7CC6E81DA
- MD5 SHA1 SHA512 SSDEEP TLSH