Overview

overview

7

Static

static

3

czkawka_cli.exe

windows10-2004-x64

1

czkawka_cli.exe

windows11-ltsc_2024-x64

1

czkawka_gui.exe

windows10-2004-x64

7

czkawka_gui.exe

windows11-ltsc_2024-x64

3

gdbus.exe

windows10-2004-x64

1

gdbus.exe

windows11-ltsc_2024-x64

1

iconv.dll

windows10-2004-x64

1

iconv.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...ni.dll

windows10-2004-x64

1

lib/gdk-pi...ni.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...ns.dll

windows10-2004-x64

1

lib/gdk-pi...ns.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...nm.dll

windows10-2004-x64

1

lib/gdk-pi...nm.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...if.dll

windows10-2004-x64

1

lib/gdk-pi...if.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...vg.dll

windows10-2004-x64

1

lib/gdk-pi...vg.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...ga.dll

windows10-2004-x64

1

lib/gdk-pi...ga.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...bm.dll

windows10-2004-x64

1

lib/gdk-pi...bm.dll

windows11-ltsc_2024-x64

1

lib/gdk-pi...pm.dll

windows10-2004-x64

1

lib/gdk-pi...pm.dll

windows11-ltsc_2024-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

libbz2-1.dll

windows10-2004-x64

1

libbz2-1.dll

windows11-ltsc_2024-x64

1

libcairo-2.dll

windows10-2004-x64

1

libcairo-2.dll

windows11-ltsc_2024-x64

1

libcairo-g...-2.dll

windows10-2004-x64

1

libcairo-g...-2.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    windows_czkawka_gui_gtk_412 (1).zip
  • Size 57.4MB
  • Sample261017-22wfdadv5k
  • SHA256 b7840d1d0200038a3f95cc4adffb14f18e3ec36dd86f35cef7a2ffd66dd0dfad
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      czkawka_cli.exe
    • Size 50.5MB
    • SHA256 dfb365cc5561df1e2f86ab26c2ae0f83473078a6290677fcb93511dddafd5293
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      czkawka_gui.exe
    • Size 57.2MB
    • SHA256 6a36f5e6f6eeda3fc43babc25363d3add573ddd82cf984a3fa47cba70eb37681
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4
    • Target
      gdbus.exe
    • Size 46KB
    • SHA256 395dda0a695d91fa7c6e9138bbdd2d67fe94cfc86429c6933e6ddecdc311a765
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      iconv.dll
    • Size 38KB
    • SHA256 d62d187a2502663724300c203ab10dee57de8edbdea206f2e2063895fdc6113a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ani.dll
    • Size 29KB
    • SHA256 db3a03075005fe4c1b24c3a31845d1dc078fe0dae7bcf8021a2d4aa2d9f58015
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-icns.dll
    • Size 22KB
    • SHA256 7be4bbcfd22271a4e10b4a71b12459b6ecee817ca696e8f89fb887830b7a37e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-pnm.dll
    • Size 27KB
    • SHA256 23d7ac0d282ec2d914d99b2476c7ff5e5f0e602e12269a97cb7be35418f42c2d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-qtif.dll
    • Size 23KB
    • SHA256 d33876d6cbb367fe292c35332b2ebbcab3dc45f990220e1a51591fa18f4dbd38
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-svg.dll
    • Size 20KB
    • SHA256 d15f3f1e88eda7491a7c3de70d123de5503047c96fe4eb913e5d26f36eb09597
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-tga.dll
    • Size 29KB
    • SHA256 5142a7be187ee6f3841d70d99660f745c668be1c8dc39021d08a8f6076114851
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-xbm.dll
    • Size 63KB
    • SHA256 e6407f6667f91f522733b7512ca3cd32235460eaddd3fd71bdfa3acc54f5b489
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral21behavioral22
    • Target
      lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-xpm.dll
    • Size 78KB
    • SHA256 42e31bce8677930a9b56cabfaf7a8d55dc3dac3d624ba54ae82b931f2f3055b0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral23behavioral24
    • Target
      libEGL.dll
    • Size 501KB
    • SHA256 3647106ce8792fb9520a69ccc173a7e92d883e73916534c9469877fd13284293
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral25
    • Target
      libGLESv2.dll
    • Size 7.6MB
    • SHA256 8da83e0bc0e49c173b773ff537810799724bbb3a0080344cb78006d10ff985e0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral26
    • Target
      libbz2-1.dll
    • Size 103KB
    • SHA256 341914570d5e6e643b5e0e37819a1705824ab9120cf17d8265a87430bf6f0462
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral27behavioral28
    • Target
      libcairo-2.dll
    • Size 1.3MB
    • SHA256 f374c1b9b0b067dd46b1c0375229b341d0eef68f043d650e1a36841e65b0f7ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral29behavioral30
    • Target
      libcairo-gobject-2.dll
    • Size 40KB
    • SHA256 0ee7a8706981c4054cf51ef1749c1a0a96e90435a68e33a6874264bcbd350467
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks