CryptoHunter.zip
- SHA256 9e168f3b4cafc93f9599ed9b2aa358cc3aef97b445e410c3e3ed0bb53f8fa4ab
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CryptoHunter.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
CryptoHunter.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target CryptoHunter.zip
- Size 19.0MB
- Sample261105-2dlahad18y
- SHA256 9e168f3b4cafc93f9599ed9b2aa358cc3aef97b445e410c3e3ed0bb53f8fa4ab
- MD5 ff9d974e06db80dfc69dc7d6a269a518
- SHA1 ad9c30457f634665ddfa5296a0fdc66d966170b3
- SHA512 9593e7e8b1ffb7399de8a8defbd4505b5dc6c4449514c9017c8e533c38a0eef8de0d4790da1c6d8380c78e00ba202e2351c93755a3c360c4e35a32cbe2f7005f
- SSDEEP 393216:ym2CmP9LPeMkZ8JgzgiMVx7l47sz6wDhI1H4HNIi5:ym2yMkGyzUx7l47SJDhIdk5
- TLSH T1E41733601FF8230206095E63EE996669F2988B2441E74A6FC73BF389B61F5D6150F378
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CryptoHunter.exe
File Explorer
-
CryptoHunter.zip.zip 19.0MB
-
CryptoHunter.exe.exe 21.4MB
-
readme.txt46B
-
sweeper.py19KB
-
wallets_trovati.txt1KB
CryptoHunter.exe
- IMPHASH 1aae8bf580c846f39c71c05898e57e88
- SHA256 c6e4062fea8ad89fd49c5f30d3499ea532ad1681ce15da0ae1ff9c9b5c396f49
- MD5 fc61a4d209e0b66706bb21a3382d54c2
- SHA1 1ac9333f041443b3d8e479b55aa0782c12e59a3a
- SHA512 57d3ae6618201bb7f544adc654522ebfda8fc293fdf6bf24f0808b783e5f99e2a2aaf26029f25b1b6a2826ab300d420aa7d954ecefdd2a0df4bc7df48a351b24
- SSDEEP 393216:uIcpCMn9llCqwZ2FiL0syB1bpk9In6GNvWFFYBH64R:uIcpuqwkcLY1bpk9ipNvW354R
- TLSH T1F5370101FD8786F6E4076A71549B626F233859160B35CBD7EA487A7DFCB72C2083A346
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
502464
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17.7MB
Virtual Size
17.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
93KB
Virtual Size
242KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
512B
Virtual Size
331B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
328KB
Virtual Size
327KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
713KB
Virtual Size
713KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
345KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/90
Size
130KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
316KB
Virtual Size
315KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
readme.txt
- SHA256 011f6c357c6b3308af1e697300b468d8748dbc1d2b52ccf34c609240a099a1b5
- MD5 29ff5e355ad84db8ce1161621e0f9c40
- SHA1 7fbaffbd9343a16fa2b51a81232161da36617028
- SHA512 889069ee03f6e628c359f1bb0b229825be9aeb54556d121dd95304fd211619fd0d34f38a66523e4a5ce5423cf57bbf200ecf303ffd634735c218d0433150bb0f
- MD5 SHA1 SHA512
sweeper.py
- SHA256 d993d5dc641df6d10b76c06a0e750303e449c42a17029705dbd2884149616f1b
- MD5 4057b55f849ce6348bde5109e8977c2c
- SHA1 d7aee890e7bbb42805d876c7fe09c10ba6b0684c
- SHA512 2ce582bd100d2ecbd64daa2587ef0ae27eb0618f1f343a5ae0b9b978a2d191359b9c8d30c98f5907fbe9ef964f4f571b92d23902a2118f32c284a979fe97f311
- SSDEEP 384:LYXcAvejq1kN68Hh1+3wZImP8B96hd3Qq:LYXd1kNVHhU3wZIm0B8d3Qq
- TLSH T10A92A627741B6CA047CFAD45D8A7E10702B97183CB8D2D76B6BCC0914F6A4BED8A1D72
- MD5 SHA1 SHA512 SSDEEP TLSH
wallets_trovati.txt
- SHA256 be78015839fd2c972f87b0111c87cc1428710112e8f7f49c434cab5effe6c93c
- MD5 72f5c66d3e5adc94cc7095651c70ab73
- SHA1 e230d957ca939c325a93e0dc60e79a80dd308133
- SHA512 006ca7e3fcd125045a6eb662f78833e8618541515a4ab315893299e97f6de14768c1927425c4e5b80263fb5ac9e460ed086a68809a5542d15bbc36c1c4a596d7
- TLSH T1CB21FDA60012EAC9C1E60BD5AF0E7BFD14CDB67405C285200AEB6CD9CDD3ED34A643AD
- MD5 SHA1 SHA512 TLSH