Overview
overview
10Static
static
10hwid pack/...sk.exe
windows11-21h2-x64
6hwid pack/...up.exe
windows11-21h2-x64
1hwid pack/...RU.exe
windows11-21h2-x64
1hwid pack/...ll.exe
windows11-21h2-x64
1hwid pack/...rt.exe
windows11-21h2-x64
5hwid pack/...64.exe
windows11-21h2-x64
5hwid pack/...IN.exe
windows11-21h2-x64
1hwid pack/...64.exe
windows11-21h2-x64
1hwid pack/...16.exe
windows11-21h2-x64
hwid pack/...IT.exe
windows11-21h2-x64
1hwid pack/...LL.dll
windows11-21h2-x64
3hwid pack/...YS.sys
windows11-21h2-x64
1hwid pack/...64.sys
windows11-21h2-x64
1hwid pack/...64.sys
windows11-21h2-x64
1hwid pack/...lp.pdf
windows11-21h2-x64
1hwid pack/...rt.exe
windows11-21h2-x64
1hwid pack/...Un.exe
windows11-21h2-x64
6hwid pack/...Un.exe
windows11-21h2-x64
6hwid pack/...ew.chm
windows11-21h2-x64
1hwid pack/...ew.exe
windows11-21h2-x64
6Analysis
-
max time kernel
496s -
max time network
509s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
30-06-2024 16:43
Behavioral task
behavioral1
Sample
hwid pack/HardDisk.exe
Resource
win11-20240611-en
Behavioral task
behavioral2
Sample
hwid pack/MacSetup.exe
Resource
win11-20240419-en
Behavioral task
behavioral3
Sample
hwid pack/monitor serial/CRU.exe
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
hwid pack/monitor serial/reset-all.exe
Resource
win11-20240508-en
Behavioral task
behavioral5
Sample
hwid pack/monitor serial/restart.exe
Resource
win11-20240508-en
Behavioral task
behavioral6
Sample
hwid pack/monitor serial/restart64.exe
Resource
win11-20240611-en
Behavioral task
behavioral7
Sample
hwid pack/serial changer/AMIDEWIN.exe
Resource
win11-20240508-en
Behavioral task
behavioral8
Sample
hwid pack/serial changer/AMIDEWINx64.exe
Resource
win11-20240508-en
Behavioral task
behavioral9
Sample
hwid pack/serial changer/DMI16.exe
Resource
win11-20240611-en
Behavioral task
behavioral10
Sample
hwid pack/serial changer/DMIEDIT.exe
Resource
win11-20240611-en
Behavioral task
behavioral11
Sample
hwid pack/serial changer/UCOREDLL.dll
Resource
win11-20240508-en
Behavioral task
behavioral12
Sample
hwid pack/serial changer/UCORESYS.sys
Resource
win11-20240611-en
Behavioral task
behavioral13
Sample
hwid pack/serial changer/UCOREW64.sys
Resource
win11-20240611-en
Behavioral task
behavioral14
Sample
hwid pack/serial changer/amifldrv64.sys
Resource
win11-20240611-en
Behavioral task
behavioral15
Sample
hwid pack/uninstall/Revo Uninstaller Help.pdf
Resource
win11-20240508-en
Behavioral task
behavioral16
Sample
hwid pack/uninstall/RevoUPort.exe
Resource
win11-20240508-en
Behavioral task
behavioral17
Sample
hwid pack/uninstall/x64/RevoUn.exe
Resource
win11-20240508-en
Behavioral task
behavioral18
Sample
hwid pack/uninstall/x86/RevoUn.exe
Resource
win11-20240611-en
Behavioral task
behavioral19
Sample
hwid pack/usb device serial/USBDeview.chm
Resource
win11-20240611-en
Behavioral task
behavioral20
Sample
hwid pack/usb device serial/USBDeview.exe
Resource
win11-20240611-en
General
-
Target
hwid pack/monitor serial/CRU.exe
-
Size
1.2MB
-
MD5
0f69af48c32613f73c6acb87a7d18661
-
SHA1
0756ae84f3b58aec29f4b9a2888624ca879f7856
-
SHA256
0351a943ca93558ff36f74c3f0c768dceb724e833e282abcf1be5b2e71d5c67b
-
SHA512
2b30c079831a30683aabc0effa6bb60c84a960c2bcda1ce5da204bebc2050a359ec2cf36df426a0d227165afb9c4b9401fd0316b2504394c7876ed177fff2377
-
SSDEEP
24576:tLEWuIj9T0gR1U2vfVD8sA15qkJ1K3mbDQca9L32GY:twfIj9T0ujvTO6L3
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
CRU.exepid process 4768 CRU.exe