General

  • Target

    Kiwi X.rar

  • Size

    27.6MB

  • Sample

    230618-ymdegaae4v

  • MD5

    5f01ed0f9ce64327bb53f08baa07b2d5

  • SHA1

    7d179aec051416b0c51194dc253cd6b5b52ec811

  • SHA256

    42dc0c6aa8d303772fdb285f615c83afb76c71eb3fbe304c65e2d93c50939458

  • SHA512

    502234ba37067d7da708c04f3c71bd49a42b03c9a13dc604cce92ec3b14604a024ca36be859c3acf7b4978244edbd026204413d620f869cf53233d485e76a946

  • SSDEEP

    786432:RvvZxky29C5LWz8oLFy1JxT3zSAzTaXgCRH9fFCiXV:RvDDWTL0rT3zSKaQCRdfgiXV

Score
7/10

Malware Config

Targets

    • Target

      Kiwi X.rar

    • Size

      27.6MB

    • MD5

      5f01ed0f9ce64327bb53f08baa07b2d5

    • SHA1

      7d179aec051416b0c51194dc253cd6b5b52ec811

    • SHA256

      42dc0c6aa8d303772fdb285f615c83afb76c71eb3fbe304c65e2d93c50939458

    • SHA512

      502234ba37067d7da708c04f3c71bd49a42b03c9a13dc604cce92ec3b14604a024ca36be859c3acf7b4978244edbd026204413d620f869cf53233d485e76a946

    • SSDEEP

      786432:RvvZxky29C5LWz8oLFy1JxT3zSAzTaXgCRH9fFCiXV:RvDDWTL0rT3zSKaQCRdfgiXV

    Score
    3/10
    • Target

      Kiwi X/Kiwi X WPF.exe.config

    • Size

      1KB

    • MD5

      1f48b296eae19f30d6abdd9e1fbc1a14

    • SHA1

      8529346e5c926a9f4ded49320873f70ec6a7f9d0

    • SHA256

      97ca967656db09e3d7046339e5c9e774c179a8d9d7bc72584eb5a8071871c2ec

    • SHA512

      c69e5e0b82a27596bc5e2481d580fdd5588036eec6fc13de31e1dfdfe9a6b81882a69c43a3f3f2f145cf17a55cfb2ce4cd28c21291935fa13336a379f040a7ee

    Score
    3/10
    • Target

      Kiwi X/Kiwi X.exe.config

    • Size

      1KB

    • MD5

      1f48b296eae19f30d6abdd9e1fbc1a14

    • SHA1

      8529346e5c926a9f4ded49320873f70ec6a7f9d0

    • SHA256

      97ca967656db09e3d7046339e5c9e774c179a8d9d7bc72584eb5a8071871c2ec

    • SHA512

      c69e5e0b82a27596bc5e2481d580fdd5588036eec6fc13de31e1dfdfe9a6b81882a69c43a3f3f2f145cf17a55cfb2ce4cd28c21291935fa13336a379f040a7ee

    Score
    3/10
    • Target

      Kiwi X/Monaco/base.txt

    • Size

      132B

    • MD5

      0d834904a252e1ab786f9637bef6819f

    • SHA1

      f8fbbdc4d0c5ebdc4037b32183a7be3027541596

    • SHA256

      dbe440c5dee6367ebca919886ffe593246e1e52618e4713373000c9fc77c87cc

    • SHA512

      72a23e1ccacbaabbd65660b57fe4d9c6bf403f35f46bd439c171eb3682c805a387db25ac2206bb9a868b230aba38de38d25bb2102a2bda688ef7ab7ba67a0b42

    Score
    1/10
    • Target

      Kiwi X/Monaco/classfunc.txt

    • Size

      1KB

    • MD5

      bf32e93d11011eb780619b3e17fb824a

    • SHA1

      f0fa7dbd2577b83a5d5a81622557ca05966d292c

    • SHA256

      519da000de235c331f10660509fab51a1815ace566b8ae5b511b75813922dcb1

    • SHA512

      5d0b4cc09c5966b3cf806b02816eb95dfc42c7e4c2056b37d254d835459444c796759795e64c3171453b5bd9d70d2705775e7200a0283725676f26a39323dc9d

    Score
    1/10
    • Target

      Kiwi X/Monaco/globalf.txt

    • Size

      835B

    • MD5

      1700df0210cda593d3df64f51b3caaea

    • SHA1

      d4832190dc99184f0e0fde832e453fef9330646c

    • SHA256

      deae98f86c62749e4b642acb41ea5dfce0caf09bc77036aae82ee814a04ed9e0

    • SHA512

      76a651129e25bf2ac1f4a1f1e397185ec4eeb292ef64ed44633bde6ecc7b342cb1464224f2c521a69ac51d88dc4d46bc392c5db2ab94939bf84be5ef21f85add

    Score
    1/10
    • Target

      Kiwi X/Monaco/globalns.txt

    • Size

      220B

    • MD5

      ba56c14634b7ae6fb585be396acf5f03

    • SHA1

      8aa4125655cd48073b55c5ea892e5da734220bbc

    • SHA256

      5cb987e7c87f2f04cdd45f3a474fb2380bbf846534e38f2b485eafc562b7b482

    • SHA512

      46a904064080fa51e9071e11c44685cdeadf0cdabe5feb038a4a85f2141ef13d46bd0563016ea62e5b1ccb76995c71451f6ba958b5551c31d36231b8f436190f

    Score
    1/10
    • Target

      Kiwi X/Monaco/globalv.txt

    • Size

      161B

    • MD5

      5cf9f238d4e62c8bcde351651c3a2a45

    • SHA1

      16f25e5686f1235d1fbd9b9954236b043d2e6260

    • SHA256

      eeb98f2c9911ae8ddd25f1b3be3732000f16788bda60aa962e9f8452012b1062

    • SHA512

      b2fb24e6309303220eead8ac60d68959d189178db62611361440cafd219b45e57d3b79656b51df13eb825097557e9cd735ef228c1fc82e593368ce30fb88ca58

    Score
    1/10
    • Target

      Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_16x.svg

    • Size

      4KB

    • MD5

      48e754cb54c78a85dcc9aaea9a27847e

    • SHA1

      8d79b23037deb6586e4954305dcb4caee14afbd2

    • SHA256

      d1aa361f33564e8f9d527a01a66c7ce35d73f23417432e80ddf51f562770ee79

    • SHA512

      f6d902b5c73b59636cb71d4019ff45cb77532bf22aab28a8314697e24a62163a94140c97495ad5ce421c09c26e4bcbfe5a815eae27e945c51ccd80c2ba9c3a77

    • SSDEEP

      48:CnN6wkEX+c9Vlt4AFCj93Z0hDC7hSBnukNyhDFtrJGuG2XvS+yZCahDC7hSBnhKm:zJWFCMcfkCFGE6+yZCacJImkArbbqrAm

    Score
    1/10
    • Target

      Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg

    • Size

      4KB

    • MD5

      6e5c0ce7ec09969f07ea6ee078ef8ad6

    • SHA1

      deadc5357a26852d872bffa77d1aa19108603b25

    • SHA256

      7d23c0f30cb9c05c81bb15785a3299772ae3cfbe51f3e04895aa1f23ffbeba5b

    • SHA512

      2b02cb82f9e4720ee43bfc8b7fe5d6de38228329aafbedb589d5a219057c15f073023deca3c1ca5b65cea4a4f0d863ebd88c889b1d67119639fae2ce180863bf

    • SSDEEP

      48:Cn7wkEX+c9Vlt4AFCj93Z0hDC7hSBnukNyhDFtrJGuG2XvS+yZCahDC7hSBnhKHG:EJWFCMcfkCFGE6+yZCacJImkArbbqrAm

    Score
    1/10
    • Target

      Kiwi X/Monaco/vs/editor/editor.main.css

    • Size

      171KB

    • MD5

      233217455a3ef3604bf4942024b94f98

    • SHA1

      95cd3ce46f4ca65708ec25d59dddbfa3fc44e143

    • SHA256

      2ec118616a1370e7c37342da85834ca1819400c28f83abfcbbb1ef50b51f7701

    • SHA512

      6f4cb7b88673666b7dc1beab3ec2aec4d7d353e6da9f6f14ed2fee8848c7da34ee5060d9eb34ecbb5db71b5b98e3f8582c09ef3efe4f2d9d3135dea87d497455

    • SSDEEP

      1536:ZxP4PUPVP0PAPeMi76Q4TVq5bbhLynlDTkDatDF8Jmmvgs0aMJkn:p2bIRkDSYmmvgs0aMJK

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Kiwi X/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg

    • Size

      20KB

    • MD5

      649fb0a55b0e0fc9d79e6b7872a14c10

    • SHA1

      b33619c9dfd65d3f2e5a5fcb767a752123d51607

    • SHA256

      fcc3026b97068f3d9e1743d36ca26b96ffdbcd2841fa9d804caccc4f249911c8

    • SHA512

      3fb4b07e9313b69c84f887c9ca0464e4c8d06a98a8f2ad7d0b48452d068bd526004c21633d0279b4b5e17ad882acf8c7e99b4c3e7650be43b495b670a87d0cbd

    • SSDEEP

      384:cyPJZCcKWPJuCNoSmvcar1PNY6g2HdSjEc3/WD3:DCdCNkvcaQ6x9SjES/W7

    Score
    1/10
    • Target

      Kiwi X/WRDAPICONF.json

    • Size

      25B

    • MD5

      e980ad71e4e5ed465831d732d3175c98

    • SHA1

      f07e0767a4d9d53bfd8a4028fcd6b2ecd2df8c30

    • SHA256

      a52aed34a368ec553e7f89067ec65b7d6205208640f8357f76247e406d80452e

    • SHA512

      d440156035b849287f7ad719345e99b06e481b27c6c9f794ab9fc8c3319de44dd42f62cee454608389feda7d803eaf475bc0215c3d589b0a4d50fd1215bc7861

    Score
    3/10
    • Target

      Kiwi X/bin/settings

    • Size

      268B

    • MD5

      79c8e6ac5ae2710242f3fc143da005b2

    • SHA1

      411125556d5063030a4a7a2f86acf913ccff13c8

    • SHA256

      fd2fd379b401aa0ff97e2bc97722f48687eafe4646bb5d1a13c86fc99389f1e2

    • SHA512

      b0807e1cd50895872cff33e614e29237b30099db97ddb27bb2360e6921f21ad68a7debcec32047836a6f623fac181f3e7d17a416aa5d2fa9dd827d5f3e4235ae

    Score
    1/10
    • Target

      Kiwi X/bin/ver.txt

    • Size

      3B

    • MD5

      0b0ec9f1cc28b3c19dc6c36dcd5af7cc

    • SHA1

      2afe7d50c10921ac0f9f899939231a737e7dc2b2

    • SHA256

      9c193c604ad7de942961af97b39ff541f2e611fdf0b93a3044e16dfbd808f41b

    • SHA512

      2540f7fbc4d88c94deb5e0b92813bc9a1a637096dfc36b617f5e3cce355d7af7e4ce0469bc5be63483ef99b0ac9484258fa2bc798afa11fd313dd33aea566677

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Empty Servers.txt

    • Size

      1B

    • MD5

      c4ca4238a0b923820dcc509a6f75849b

    • SHA1

      356a192b7913b04c54574d18c28d46e6395428ab

    • SHA256

      6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    • SHA512

      4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Servers With Fruits.txt

    • Size

      1B

    • MD5

      cfcd208495d565ef66e7dff9f98764da

    • SHA1

      b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

    • SHA256

      5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

    • SHA512

      31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Total Servers.txt

    • Size

      1B

    • MD5

      c4ca4238a0b923820dcc509a6f75849b

    • SHA1

      356a192b7913b04c54574d18c28d46e6395428ab

    • SHA256

      6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    • SHA512

      4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Fruit Farm Logs.txt

    • Size

      203B

    • MD5

      da6bd1d5590351d30da3f979e1dc0c7e

    • SHA1

      dcc06b6ab882ee7c2ee7ae0708734c55d4f227e5

    • SHA256

      a0ff1bc9fae8f3ad6a9484cc0d550836837548b39b5cd649d51e01cea0ef7f60

    • SHA512

      e48d0b7b581e19c709c6e14b43f630469ee102ee74c05bc950fcdde599d148afa69af98663cea3ce5b539b15dff22db97bd649f83437047bb84ac1cad3e46504

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Mukuro/BF/kiwiecksfruits_3897567374.json

    • Size

      1KB

    • MD5

      092edb0d866c05c9b9dd1534245e568d

    • SHA1

      fd0f39a3130d832fc9c0b4fb57b27a31daa09a27

    • SHA256

      777dedb5a83a2c099f7265fa2cf0cf95a29a376e003d34e47290b4c036bf9db8

    • SHA512

      4b5a2d09f3470bc3c55556b52e1396fdbbcfc04298e90bfedc279ddc78313e1bb9d137de264462c8456bd1d77dc0e64ef0e3ba95ac9cbc3380c712b95f136f88

    Score
    3/10
    • Target

      Kiwi X/bin/workspace/NotSameServers.json

    • Size

      4B

    • MD5

      15f019b4deb70b75c09cbc1ae50533a4

    • SHA1

      758a1332c2766376e9de99c2b3c2f5b8e0f84b17

    • SHA256

      525ec3b5ad9afc0f09a5f7e0eb865e97f5b4b614a85cf93f3ae644f8e5f874f0

    • SHA512

      7b860f89b9feb2e49dcf90f9db3e166e1d3f6c62c6c145fe81ea92fbf59c91fa2cabd5677a04402ac837e8c24652b9f49a30c181f83364ed91d25633e84a4896

    Score
    3/10
    • Target

      Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Enter.txt

    • Size

      23B

    • MD5

      118e5315caf3e357c30c45affa9e8e3e

    • SHA1

      114e3cf096058a901a98443adb14aa035edeb7ff

    • SHA256

      b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482

    • SHA512

      c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Self Bot RMA/saved_admins/ExtoriusOnTop.txt

    • Size

      23B

    • MD5

      118e5315caf3e357c30c45affa9e8e3e

    • SHA1

      114e3cf096058a901a98443adb14aa035edeb7ff

    • SHA256

      b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482

    • SHA512

      c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Here.txt

    • Size

      23B

    • MD5

      118e5315caf3e357c30c45affa9e8e3e

    • SHA1

      114e3cf096058a901a98443adb14aa035edeb7ff

    • SHA256

      b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482

    • SHA512

      c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f

    Score
    1/10
    • Target

      Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Usernames.txt

    • Size

      23B

    • MD5

      118e5315caf3e357c30c45affa9e8e3e

    • SHA1

      114e3cf096058a901a98443adb14aa035edeb7ff

    • SHA256

      b52f4b1df7c635df62bbce27293474403020fe68b0f66d9547e170f3e6efe482

    • SHA512

      c8f74cdef19ab610bf2f1d39b6f8b06c28669f39c281ef230cfec6ef596f4902a5b6f19abc07ae6bc6ce2c02c29107c3840037d9f24fbc8661d27e0bf359529f

    Score
    1/10
    • Target

      Kiwi X/finj.exe

    • Size

      6.2MB

    • MD5

      bb8df28332e308cf40dfd2df00161f34

    • SHA1

      888f2213a68c61cc635fbfbddab694f517b0c315

    • SHA256

      237ece227d239ca11f090e1ddde4ee8f68ef5f7aaf5fcb0ecba14424ea276d76

    • SHA512

      09d67c94ed331f2383627db1317f5480a0ef9fc8809cb075f9e603b7a653a4931725fd32776492ee4aa163035912535934a310aa2f8eb8790e4736555c28f4cc

    • SSDEEP

      98304:2AONPewHLRESPB2KC6Z36S0GQpZLff+RaDDyw3W92wUpIU9Yj86eL1DXSJBN2lAB:CJXHLqU2tkw+wRG92wURDovpR9sA

    Score
    1/10
    • Target

      Kiwi X/logs/02-10-2022_00-54-09_Crash.txt

    • Size

      32KB

    • MD5

      379ed58c6cbcab273c1970ac2840f8c1

    • SHA1

      54da0afd20ca5fc6c01dec6dbcf8c99fd8c6f183

    • SHA256

      a7eb0bb7a82d4b6012936d5b4649562448ad7967f86d7e715ffb14e338512ad1

    • SHA512

      72f251c579c2166ba446ef051f6738a7756b0c9daff34ccc8c76fceef02d5815f31f38312f363fdf42efe8b7ef589d5bb0cb23a626c348e55f34118c35d0a5ac

    • SSDEEP

      768:ViWVz7dN6Ay419Jo1P78JwfLbzoFY/pkAe9SAoPt/7RxOtymvS/CzAZ/:ViWVz7dN6Ay419Jo1P78JwfN/p11OzSx

    Score
    1/10
    • Target

      Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/package.lua

    • Size

      98KB

    • MD5

      be76d11a30639dd08f4704cc1ec3866b

    • SHA1

      d66f8ed9546fe646d44f1d357d5d119455fecadd

    • SHA256

      74a9d37d411e981f87fe850aadd993e00b78a118f7923dd9a68ee9356cac6fdf

    • SHA512

      d8b28701d6027fc784ff80fd3ac0b79cc285bc5977725a118b2fbd2cf468cbabe8850197f4cdf76d0d8b1e0a22fd11f4f8b317aea567045218063a2c3b81d339

    • SSDEEP

      3072:lGPnAKVkgrGblRlL8cn1bIYn4uEpAbLgnoZlxk:0PnAKVjrGblRlL8cnBIY4uEpAbLgnoZM

    Score
    1/10
    • Target

      Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/MIDI.lua

    • Size

      66KB

    • MD5

      de2617b5de723b0cf9c73e621667077e

    • SHA1

      49ecaebe1741642aa30bbc44cbd1c1a94b95c021

    • SHA256

      57b1d641d524f49f5e280eb9a163f04284921c8a1756e902fa0d6465a6460787

    • SHA512

      1a9bc9aff6a0a3a9b919ed60a9c84757667a5b7d74d416e63dbdfc56c387e64f6d61446c4a368cda62e80a226c5761b18de1119bfb51c0e51a9919528fb6d41d

    • SSDEEP

      768:P5s+4B4jfuy4BxT9lfyITIhHiPAflD8IT2j5GlMuETriNlqjfkoItQ/9/ItvKP5f:PQXnOlDWG+HHkltQ/xIp+5Sqw/w

    Score
    1/10
    • Target

      Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/TaskScheduler.lua

    • Size

      3KB

    • MD5

      393276ba47c01f982d7167b02c0351e1

    • SHA1

      9330b8f599841168e5510df7ea6b5d24bf4f94db

    • SHA256

      adfdf3a18734582c813d04b5151a0cbf6007a8ff9292e581f05fa2c71a1345c7

    • SHA512

      cb9d40b1b52cee1ae9b211754ca6b187873891301fde94d4d14f417384f2012615dc20217200cef3c6aa283da4a9982030ba2b57f5132f43e1b14e6a89a6a574

    Score
    1/10
    • Target

      Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Promise.lua

    • Size

      36KB

    • MD5

      6f33986baa0be18d5edf466245dcf2e5

    • SHA1

      77df987e990933765720da6c3507446c9d4d1bfd

    • SHA256

      1c017dc3f8f592e47117ae9e61ba406289982d07c7dcefdc567616d8395b22a3

    • SHA512

      93e1f148978f091328ddd097357ceb72d1b711c5f314065054a5211524e96f98761ca6c79729e7425647e1c66bdc902dc814a05ebd1db55910854c71ab7a71e1

    • SSDEEP

      768:78b79yLTkB47KN2+i4d2QuB+82I9GoAYT66/sNCgY8Q/MSTpdfLyR:gb7y/Y+oBotTv2dLQFi

    Score
    1/10
    • Target

      Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/TableUtil.lua

    • Size

      11KB

    • MD5

      a47d6225dfd1221d16a879bf28686e37

    • SHA1

      dafdf17072603d6f6b5de18973f391fd5866e287

    • SHA256

      e1eae807378e3f690ebdf32f55cd8607d9bbed76b29c0ba7b7f21dbe8f13e549

    • SHA512

      d0edf01c7e12db9309f1fbc79b3be106afc55a4b1246f050fe74a67b16bb1a0bd5a9b88b709383a6b4984f41d360b39e5edd5174c42b3c7e55d261d331055980

    • SSDEEP

      192:Euak0Z3fWNKaoXThUpFgpcO9+/bFSAaQZNh7WK86dENRCWym29hfQhRx2NbFknvD:rak0Z3fWNKaoDhSJO9+/bFpaQLhSK86S

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks