Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
24-07-2023 07:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KVS.exe
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
KVS.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
KVS.exe
-
Size
2.4MB
-
MD5
780c47370472d775c683a2b4c8fd670e
-
SHA1
10282193562e25cfd0e14ab8c94babb1b4e0762c
-
SHA256
ad867521682c0499a8e4401109ef841283d830d11e795d5d5aff8305cf5427bc
-
SHA512
c4f522caae3f59ad1247a5a7a2dcd5a8c85d80c0bbf8707b191fe159a1084083ffab0fa492c022b8a5f0a32e8eb9b0fdeafde0d95c8216a7d7e3315e6e4ca15d
-
SSDEEP
24576:3/Sjfxen3LiiDzymSIQPhajuOpTOlnTcqhl1IGUYynwF18R+Q/2nkU8:3L3LiiDzyanwF18R+Q/2nkU8
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\win.ini KVS.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1384 KVS.exe