kronos | c911931abc119b6cc53a934ba0ea7da27a10aa19cf898fb82607ea7f057175f9 | Triage™

Login
Reports

Overview

overview

Static

static

1

c911931abc...f9.exe

windows7-x64

c911931abc...f9.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
c911931abc119b6cc53a934ba0ea7da27a10aa19cf898fb82607ea7f057175f9
Size 221KB
Sample221126-h8nvbsbh28
SHA256 c911931abc119b6cc53a934ba0ea7da27a10aa19cf898fb82607ea7f057175f9
MD5 596750f8bc7c1b8d15e2ed18995cb167
SHA1 a3adcd5f65d303a566206696ab4b02150a9ecc97
SHA512 72f3ffde1db036fbdf1cbfabc5d7dd84f284f1607f60b9e8756be4106217a8cf1db003e3dbf86f9a593dea6f36f8c130eccfe662ef43514e64d327dd3ed282fb
SSDEEP 6144:pwHys8jsO3Mor+1MfgdCVtoAmNS3MECTphNDv3:SqsOTrEouCVtoq8ECTphN/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kronos banker botnet persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c911931abc119b6cc53a934ba0ea7da27a10aa19cf898fb82607ea7f057175f9.exe

Resource

win7-20221111-en

windows7-x64

13 signatures

150 seconds

kronos banker botnet persistence

Behavioral task

behavioral2

Sample

c911931abc119b6cc53a934ba0ea7da27a10aa19cf898fb82607ea7f057175f9.exe

Resource

win10v2004-20220901-en

windows10-2004-x64

9 signatures

150 seconds

kronos banker botnet persistence

Malware Config

Targets

- Target
  c911931abc119b6cc53a934ba0ea7da27a10aa19cf898fb82607ea7f057175f9
- Size 221KB
- SHA256 c911931abc119b6cc53a934ba0ea7da27a10aa19cf898fb82607ea7f057175f9
- MD5 596750f8bc7c1b8d15e2ed18995cb167
- SHA1 a3adcd5f65d303a566206696ab4b02150a9ecc97
- SHA512 72f3ffde1db036fbdf1cbfabc5d7dd84f284f1607f60b9e8756be4106217a8cf1db003e3dbf86f9a593dea6f36f8c130eccfe662ef43514e64d327dd3ed282fb
- SSDEEP 6144:pwHys8jsO3Mor+1MfgdCVtoAmNS3MECTphNDv3:SqsOTrEouCVtoq8ECTphN/
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

kronos banker botnet persistence
- Kronos
  banker botnet kronos
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

kronosbankerbotnetpersistence

behavioral2

kronosbankerbotnetpersistence

© 2018-2026

Terms | Privacy