General
- Target Croreplay_-_Billing_Report.exe
- Size 3.1MB
- Sample261017-labc5acy3k
- SHA256 f211eb4e9b7cfab20d5e4b747a8b4b5a1a1f4aade39621a559c5715ec4fcea86
- MD5 f3095ae00c2b65df4c2353ce8f81974b
- SHA1 14626f75622799cb4065288fd66988b33f9adb2c
- SHA512 33230f71912813144a04ec90fa8815cc61378f0d107539b0c135b52ffa5cf6623317d48dbea9b9c4548990a205bc3f4e4857a87eca8fcb209b353935a8c7ac77
- SSDEEP 49152:Nqe3f6soT5WXYPjbU64U1rhAg0J22aw5yjoVe6nOQHsxLZDjv:cSiXc3UVmJ2Xwys0WOMKtv
- TLSH T154E5F13FB268653FD5AA0B3245B39320597BBA61A81B8C2F07F0490DDF664701E3F656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
Croreplay_-_Billing_Report.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Croreplay_-_Billing_Report.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Croreplay_-_Billing_Report.exe
- Size 3.1MB
- SHA256 f211eb4e9b7cfab20d5e4b747a8b4b5a1a1f4aade39621a559c5715ec4fcea86
- MD5 f3095ae00c2b65df4c2353ce8f81974b
- SHA1 14626f75622799cb4065288fd66988b33f9adb2c
- SHA512 33230f71912813144a04ec90fa8815cc61378f0d107539b0c135b52ffa5cf6623317d48dbea9b9c4548990a205bc3f4e4857a87eca8fcb209b353935a8c7ac77
- SSDEEP 49152:Nqe3f6soT5WXYPjbU64U1rhAg0J22aw5yjoVe6nOQHsxLZDjv:cSiXc3UVmJ2Xwys0WOMKtv
- TLSH T154E5F13FB268653FD5AA0B3245B39320597BBA61A81B8C2F07F0490DDF664701E3F656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.