General
- Target cRazy.exe
- Size 12.8MB
- Sample260922-stchvsxgmc
- SHA256 4a6226d1d85896957678e7a1a109fd2c740e4f7022d725d8c47ea027819e3d2d
- MD5 82f4c4394c71b5f80abb35dc3a526087
- SHA1 253ee698107c9078c9349d53bd0874d5b248af86
- SHA512 b4dd57b64b8fefff1ee232f9f586ef2e12947b8f38219bd7d777abf27245eb7d66536f6d836ba5a862ac1a005e58e8b907a0af894a7e805577651789734f8b99
- SSDEEP 393216:r/zTH1VVFSx/hrbdXQfM6R4RmhdeXTHswqwj0Ch:r/nHbVgxFYMc3dartz
- TLSH T100D63388B79505E8F45B613D58D48B1BE3E1BC320BA5C9CB17B00E691E677E4ED34B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
cRazy.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
cRazy.exe
Resource
win10ltsc2021-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
cRazy.exe
Resource
win11-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
cRazy.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target cRazy.exe
- Size 12.8MB
- SHA256 4a6226d1d85896957678e7a1a109fd2c740e4f7022d725d8c47ea027819e3d2d
- MD5 82f4c4394c71b5f80abb35dc3a526087
- SHA1 253ee698107c9078c9349d53bd0874d5b248af86
- SHA512 b4dd57b64b8fefff1ee232f9f586ef2e12947b8f38219bd7d777abf27245eb7d66536f6d836ba5a862ac1a005e58e8b907a0af894a7e805577651789734f8b99
- SSDEEP 393216:r/zTH1VVFSx/hrbdXQfM6R4RmhdeXTHswqwj0Ch:r/nHbVgxFYMc3dartz
- TLSH T100D63388B79505E8F45B613D58D48B1BE3E1BC320BA5C9CB17B00E691E677E4ED34B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.