Overview

overview

8

Static

static

8

crazy.exe

windows7_x64

8

crazy.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    crazy.exe

  • Size

    5.2MB

  • Sample

    200624-ft4wew3pc6

  • MD5

    5681f1da959eb80af6735166b1e71cdb

  • SHA1

    74036e08dea67fbbee5d81e07fb24408fe4305fe

  • SHA256

    69cd9793d80b5e5d7f5bf377822dc573c84ef939ede4eedd892fd1b757435bff

  • SHA512

    d175f8adc5f6ac0e1a616bf24f1c3d884ca02e9f057e15ede43297ef0472a80a286ae032acaeedf9a6d87449fb6abe020fcdcb549f79429266919717f711f82d

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      crazy.exe

    • Size

      5.2MB

    • MD5

      5681f1da959eb80af6735166b1e71cdb

    • SHA1

      74036e08dea67fbbee5d81e07fb24408fe4305fe

    • SHA256

      69cd9793d80b5e5d7f5bf377822dc573c84ef939ede4eedd892fd1b757435bff

    • SHA512

      d175f8adc5f6ac0e1a616bf24f1c3d884ca02e9f057e15ede43297ef0472a80a286ae032acaeedf9a6d87449fb6abe020fcdcb549f79429266919717f711f82d

    Score
    8/10
    persistenceevasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Loads dropped DLL

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

2
T1031

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks