Overview

overview

8

Static

static

1

koid.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    koid.exe

  • Size

    1.7MB

  • Sample

    230216-1q5n8sbh4w

  • MD5

    937bd53a5f505b8e9b00416590ad8d92

  • SHA1

    5abece11f9d282ec009bf441f132676344f1ede2

  • SHA256

    662d56478c8fa24fb43b71cba64af8d941ddb90659c2412144b46137e2cc4c36

  • SHA512

    2027fe14eff8cc0edd67be7f159e0710d79376aef11a70d4c0ad94d501667fd178780fb3a8f0c4481d2da32a3f6fd698e45cef297aee628cda1ae164e0434dd5

  • SSDEEP

    49152:MXi87ZaoNcK9mVrSPYO1M+BrgdhwmzJnU:yvycBr

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      koid.exe

    • Size

      1.7MB

    • MD5

      937bd53a5f505b8e9b00416590ad8d92

    • SHA1

      5abece11f9d282ec009bf441f132676344f1ede2

    • SHA256

      662d56478c8fa24fb43b71cba64af8d941ddb90659c2412144b46137e2cc4c36

    • SHA512

      2027fe14eff8cc0edd67be7f159e0710d79376aef11a70d4c0ad94d501667fd178780fb3a8f0c4481d2da32a3f6fd698e45cef297aee628cda1ae164e0434dd5

    • SSDEEP

      49152:MXi87ZaoNcK9mVrSPYO1M+BrgdhwmzJnU:yvycBr

    Score
    8/10
    discoveryupx

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks