42dc0c6aa8d303772fdb285f615c83afb76c71eb3fbe304c65e2d93c50939458

Submit
Reports

Overview

overview

Static

static

Kiwi X.rar

windows10-2004-x64

Kiwi X/Kiw...config

windows10-2004-x64

Kiwi X/Kiw...config

windows10-2004-x64

Kiwi X/Mon...se.txt

windows10-2004-x64

Kiwi X/Mon...nc.txt

windows10-2004-x64

Kiwi X/Mon...lf.txt

windows10-2004-x64

Kiwi X/Mon...ns.txt

windows10-2004-x64

Kiwi X/Mon...lv.txt

windows10-2004-x64

Kiwi X/Mon...6x.svg

windows10-2004-x64

Kiwi X/Mon...6x.svg

windows10-2004-x64

Kiwi X/Mon...in.css

windows10-2004-x64

Kiwi X/Mon...te.svg

windows10-2004-x64

Kiwi X/WRD...F.json

windows10-2004-x64

Kiwi X/bin/settings

windows10-2004-x64

Kiwi X/bin/ver.txt

windows10-2004-x64

Kiwi X/bin...rs.txt

windows10-2004-x64

Kiwi X/bin...ts.txt

windows10-2004-x64

Kiwi X/bin...rs.txt

windows10-2004-x64

Kiwi X/bin...gs.txt

windows10-2004-x64

Kiwi X/bin...4.json

windows10-2004-x64

Kiwi X/bin...s.json

windows10-2004-x64

Kiwi X/bin...er.txt

windows10-2004-x64

Kiwi X/bin...op.txt

windows10-2004-x64

Kiwi X/bin...re.txt

windows10-2004-x64

Kiwi X/bin...es.txt

windows10-2004-x64

Kiwi X/finj.exe

windows10-2004-x64

Kiwi X/log...ash.js

windows10-2004-x64

Kiwi X/wor...age.js

windows10-2004-x64

Kiwi X/wor...IDI.js

windows10-2004-x64

Kiwi X/wor...ler.js

windows10-2004-x64

Kiwi X/wor...ise.js

windows10-2004-x64

Kiwi X/wor...til.js

windows10-2004-x64

Analysis

max time kernel
134s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
18-06-2023 19:53

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Kiwi X.rar

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Kiwi X/Kiwi X WPF.exe.config

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Kiwi X/Kiwi X.exe.config

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

Kiwi X/Monaco/base.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Kiwi X/Monaco/classfunc.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Kiwi X/Monaco/globalf.txt

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Kiwi X/Monaco/globalns.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Kiwi X/Monaco/globalv.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_16x.svg

Resource

win10v2004-20230220-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg

Resource

win10v2004-20230221-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

Kiwi X/Monaco/vs/editor/editor.main.css

Resource

win10v2004-20230220-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Kiwi X/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg

Resource

win10v2004-20230220-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

Kiwi X/WRDAPICONF.json

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Kiwi X/bin/settings

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Kiwi X/bin/ver.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Empty Servers.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Servers With Fruits.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Total Servers.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Kiwi X/bin/workspace/Fruit Farm Logs.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Kiwi X/bin/workspace/Mukuro/BF/kiwiecksfruits_3897567374.json

Resource

win10v2004-20230221-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

Kiwi X/bin/workspace/NotSameServers.json

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Enter.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/ExtoriusOnTop.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Here.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Kiwi X/bin/workspace/Self Bot RMA/saved_admins/Usernames.txt

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Kiwi X/finj.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Kiwi X/logs/02-10-2022_00-54-09_Crash.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/package.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/MIDI.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/TaskScheduler.js

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/Promise.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Kiwi X/workspace/rostruct/cache/releases/richie0866-midiplayer-LATEST-ZIPBALL/src/Util/TableUtil.js

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Kiwi X/finj.exe
Size

6.2MB
MD5

bb8df28332e308cf40dfd2df00161f34
SHA1

888f2213a68c61cc635fbfbddab694f517b0c315
SHA256

237ece227d239ca11f090e1ddde4ee8f68ef5f7aaf5fcb0ecba14424ea276d76
SHA512

09d67c94ed331f2383627db1317f5480a0ef9fc8809cb075f9e603b7a653a4931725fd32776492ee4aa163035912535934a310aa2f8eb8790e4736555c28f4cc
SSDEEP

98304:2AONPewHLRESPB2KC6Z36S0GQpZLff+RaDDyw3W92wUpIU9Yj86eL1DXSJBN2lAB:CJXHLqU2tkw+wRG92wURDovpR9sA

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4728	finj.exe
4728	finj.exe
4728	finj.exe
4728	finj.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Kiwi X\finj.exe
"C:\Users\Admin\AppData\Local\Temp\Kiwi X\finj.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4728-133-0x0000000000740000-0x0000000000741000-memory.dmp

Filesize
4KB

Download
memory/4728-134-0x0000000000750000-0x00000000010E8000-memory.dmp

Filesize
9.6MB

Download