Overview

overview

8

Static

static

kbdy.dll

windows7-x64

8

kbdy.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    kbdy.dll

  • Size

    2.0MB

  • Sample

    220908-xgff7sfcd6

  • MD5

    2401979290852e560c9349440d57a373

  • SHA1

    a4bf665625cafcbe098933f83365d382b8201845

  • SHA256

    b6229f1c99715701ee35588044d0e243014d07c56662ac25e8d1d98ba00c6879

  • SHA512

    3cc538bcc4922a48ecfad7c47021882f98ac0905122f3f5aeeb3efd1c91424c7ba55f25f766130c178fa507f6a0d3e5eb25543c4775cd7387a8b029c1869774e

  • SSDEEP

    12288:5VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:4fP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Score
8/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      kbdy.dll

    • Size

      2.0MB

    • MD5

      2401979290852e560c9349440d57a373

    • SHA1

      a4bf665625cafcbe098933f83365d382b8201845

    • SHA256

      b6229f1c99715701ee35588044d0e243014d07c56662ac25e8d1d98ba00c6879

    • SHA512

      3cc538bcc4922a48ecfad7c47021882f98ac0905122f3f5aeeb3efd1c91424c7ba55f25f766130c178fa507f6a0d3e5eb25543c4775cd7387a8b029c1869774e

    • SSDEEP

      12288:5VI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:4fP7fWsK5z9A+WGAW+V5SB6Ct4bnb

    Score
    8/10
    evasionpersistencetrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks