Overview

overview

7

Static

static

1

kanri_0.4....US.msi

windows7-x64

7

kanri_0.4....US.msi

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    kanri_0.4.2_x64_en-US.msi

  • Size

    2.8MB

  • Sample

    230615-qc774ahc2z

  • MD5

    0dcc1cbc7517b184b046622967bb268d

  • SHA1

    a7cff6578d73216a82ea5fdd2ce0dc65ccc40f6a

  • SHA256

    2fa24f30ddf550369262d28e97a989bf318c6c5ab08b5958c5a783680e05c2ae

  • SHA512

    087014b8d378b7dcf500a37630bb24094b603e25fb74005b4b5f2881c990ad545afed672d7991162ea0a2af1db06888bbcb0f7bba86216fdd80fb169f9301fdd

  • SSDEEP

    49152:yhpmIQFq1O2e7vmDMxMoqPuzY8jGSOUoX2d90I39+s+rnPGnUIwI:ipmjFq1ORvmMqPuzY8jG3md90ItWnNr

Score
7/10

Malware Config

Targets

    • Target

      kanri_0.4.2_x64_en-US.msi

    • Size

      2.8MB

    • MD5

      0dcc1cbc7517b184b046622967bb268d

    • SHA1

      a7cff6578d73216a82ea5fdd2ce0dc65ccc40f6a

    • SHA256

      2fa24f30ddf550369262d28e97a989bf318c6c5ab08b5958c5a783680e05c2ae

    • SHA512

      087014b8d378b7dcf500a37630bb24094b603e25fb74005b4b5f2881c990ad545afed672d7991162ea0a2af1db06888bbcb0f7bba86216fdd80fb169f9301fdd

    • SSDEEP

      49152:yhpmIQFq1O2e7vmDMxMoqPuzY8jGSOUoX2d90I39+s+rnPGnUIwI:ipmjFq1ORvmMqPuzY8jG3md90ItWnNr

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks