kronos | 59dc9cc5a82526223151f33fc16e4c2698c1725c93f8f7186efda9463aa9f166 | Triage™

Login
Reports

Overview

overview

Static

static

59dc9cc5a8...66.exe

windows7-x64

59dc9cc5a8...66.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
59dc9cc5a82526223151f33fc16e4c2698c1725c93f8f7186efda9463aa9f166
Size 314KB
Sample221127-xsy3pabf78
SHA256 59dc9cc5a82526223151f33fc16e4c2698c1725c93f8f7186efda9463aa9f166
MD5 e8ab73bd31591fa5337be49241f8a7d8
SHA1 c00ea2df72fe2ed1536e4f80edff39c7ff3a2f5a
SHA512 d257b5a6ba7a20c8835fe5f0553a481e628f89893a96df8e07779c00db28294d736e66dd904c6618b85820af2394040711c0ea45aeaf1e6f05e983b82f56fd5e
SSDEEP 6144:CWQ8QntTwcMT0RyE0h2D9AxxTlNKDPj9q:tQfta0RaMA/mL5q
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kronos banker botnet persistence

Static task

static1

Behavioral task

behavioral1

Sample

59dc9cc5a82526223151f33fc16e4c2698c1725c93f8f7186efda9463aa9f166.exe

Resource

win7-20220812-en

windows7-x64

10 signatures

150 seconds

kronos banker botnet persistence

Behavioral task

behavioral2

Sample

59dc9cc5a82526223151f33fc16e4c2698c1725c93f8f7186efda9463aa9f166.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  59dc9cc5a82526223151f33fc16e4c2698c1725c93f8f7186efda9463aa9f166
- Size 314KB
- SHA256 59dc9cc5a82526223151f33fc16e4c2698c1725c93f8f7186efda9463aa9f166
- MD5 e8ab73bd31591fa5337be49241f8a7d8
- SHA1 c00ea2df72fe2ed1536e4f80edff39c7ff3a2f5a
- SHA512 d257b5a6ba7a20c8835fe5f0553a481e628f89893a96df8e07779c00db28294d736e66dd904c6618b85820af2394040711c0ea45aeaf1e6f05e983b82f56fd5e
- SSDEEP 6144:CWQ8QntTwcMT0RyE0h2D9AxxTlNKDPj9q:tQfta0RaMA/mL5q
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

kronos banker botnet persistence
- Kronos
  banker botnet kronos
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

kronosbankerbotnetpersistence

behavioral2

© 2018-2026

Terms | Privacy