Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

ConfigKelmis.exe

windows7-x64

1

ConfigKelmis.exe

windows10-2004-x64

1

Kelmis.exe

windows7-x64

1

Kelmis.exe

windows10-2004-x64

1

Kelmis_Dat...rp.dll

windows7-x64

1

Kelmis_Dat...rp.dll

windows10-2004-x64

1

Kelmis_Dat...ib.dll

windows7-x64

1

Kelmis_Dat...ib.dll

windows10-2004-x64

1

Kelmis_Dat...ix.dll

windows7-x64

1

Kelmis_Dat...ix.dll

windows10-2004-x64

1

Kelmis_Dat...ty.dll

windows7-x64

1

Kelmis_Dat...ty.dll

windows10-2004-x64

1

Kelmis_Dat...on.dll

windows7-x64

1

Kelmis_Dat...on.dll

windows10-2004-x64

1

Kelmis_Dat...re.dll

windows7-x64

1

Kelmis_Dat...re.dll

windows10-2004-x64

1

Kelmis_Dat...ng.dll

windows7-x64

1

Kelmis_Dat...ng.dll

windows10-2004-x64

1

Kelmis_Dat...ty.dll

windows7-x64

1

Kelmis_Dat...ty.dll

windows10-2004-x64

1

Kelmis_Dat...ml.dll

windows7-x64

1

Kelmis_Dat...ml.dll

windows10-2004-x64

1

Kelmis_Dat...em.dll

windows7-x64

1

Kelmis_Dat...em.dll

windows10-2004-x64

1

Kelmis_Dat...ro.dll

windows7-x64

1

Kelmis_Dat...ro.dll

windows10-2004-x64

1

Kelmis_Dat...ne.dll

windows7-x64

1

Kelmis_Dat...ne.dll

windows10-2004-x64

1

Kelmis_Dat...le.dll

windows7-x64

1

Kelmis_Dat...le.dll

windows10-2004-x64

1

Kelmis_Dat...le.dll

windows7-x64

1

Kelmis_Dat...le.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f25fb11848b787aaa349d550bc5b7b26d71ea4eb24ab7df0c6c9be07d1b50003.zip.zip

  • Size

    53.4MB

  • Sample

    231107-rax5sahd43

  • MD5

    883b501bde185957838907d1de1f8f54

  • SHA1

    9e5be5a8807f73a0e4bc22cd83325bed7929e117

  • SHA256

    b3c5de193a97a0d29110a90341f0c42741cf44b29f7fad18839c784a5b3984c8

  • SHA512

    51af11df56b69e7ba6b5889f67e729c12f8bc8b360e7d866c2e6e5398874eff35d834faab480e0c5ac892a8d5be68bc79ef88a8aff57d7325e6bffa064e64330

  • SSDEEP

    1572864:AuUKaiOLLS4mqMEbxCah2DjF75VCmMuhzGq+9l+jWP:AtKa7C4/eah2DhHMuhKq+3J

Score
3/10

Malware Config

Targets

    • Target

      ConfigKelmis.exe

    • Size

      311KB

    • MD5

      312e7fd16860a117b87939802296fa16

    • SHA1

      68571b2ab41e8e742cb6db6ee64fffa354d5f07a

    • SHA256

      29bf254ca49d0a1d5291c2f83650de0163183481e6bab1968eef2f98a360560b

    • SHA512

      a4dc7a525d78bc851e9d97342604b6d66848dcb51ae796bd10431ed9a75fef78ceaec5f60099b8a3e5089021c0913f58304eabb47bfb47b6135d3ea8a6d5a999

    • SSDEEP

      6144:s5xvGBxmGX36RT1nQgCyZNBrKmdkF/JUdbfZWgT0PR8IxrnBCUXtXp:iwxmG0dLfIT54Q8ItR

    Score
    1/10
    behavioral1behavioral2

    • Target

      Kelmis.exe

    • Size

      638KB

    • MD5

      9bf33397af630274ab8926da08098ad5

    • SHA1

      93d6577b8cd156bc7394ac082fcff54d2f4ed338

    • SHA256

      369bade930a04a964e846b3302beba58e70fd2a112d2263c21b5b0ff0ea001a7

    • SHA512

      bf78932d84785c8f30748b28181f1184b56611c1b3415c9e9b877a94815b9dff1d9a8fc1ee7a9250cb1b07d120abccb9101eb6bd68a5a552b74e5f6921deaad5

    • SSDEEP

      1536:9C79gXAX271lcBzqEY2lkCswVxYDXosWkd09dlSaUGX5unVvX+9BRghXa9GGGGGl:+gXpJozm2lkCsuYDbMkZvVW9nWa29

    Score
    1/10
    behavioral3behavioral4

    • Target

      Kelmis_Data/Managed/Assembly-CSharp.dll

    • Size

      923KB

    • MD5

      32094d3f80714a0d3ca7cf74e1dd1cbd

    • SHA1

      0cf6431ceb7d02cec5c099810650109ad455a894

    • SHA256

      89650dc12627f1fef24438c2b8828831cb5e59628f822236ee862a632f7ae212

    • SHA512

      76f013019e50de0b367a6437339d46215f0bea91190cef73dfc9b1817e163339692249d6d1391d83479dc5ff2c482492f35332439967b7a2ed546388895307c2

    • SSDEEP

      12288:CtLbk2MflR3ss85jvjeuCSj0DSJA4M5mXetk:ChMdQB0DSJA4Amik

    Score
    1/10
    behavioral5behavioral6

    • Target

      Kelmis_Data/Managed/ICSharpCode.SharpZipLib.dll

    • Size

      194KB

    • MD5

      cc547565785085d77197950305ff88d6

    • SHA1

      e2d92d4139ff587c9ae02ef00e0579da0a9c896a

    • SHA256

      2c32b22249ca820844cb40305e6353e8ca2f52737e5f5ee13f6bb8b36ade7263

    • SHA512

      c096df120453193d633e800cfbd86049327308f98ff05a042232048f2f9ff7f6143b7d7166214d030c030ae01652e673a6ecba0a1623814739dd9181e7aebfea

    • SSDEEP

      3072:pO7jZcX98fL59/6Gt2W0hiO/pNgfilq8Cym0RjISIu2IQRI61E4hcF60DwKkBhfn:pD9WL6GtP8/pNx48CCISIpER

    Score
    1/10
    behavioral7behavioral8

    • Target

      Kelmis_Data/Managed/Mono.Posix.dll

    • Size

      207KB

    • MD5

      72c9ea78101c493635c0f763d1795d7a

    • SHA1

      c04e331b6415bf566e1aa26550bf794651704c7c

    • SHA256

      a33abceffeaa6b6d5dbd2cf77210daddfe331ed40eeae4cea3c5efb0c0db2cc0

    • SHA512

      4dcc9495000f0cb0d93381a466f8d0553c2f9ef9521ac71979371b5eded37a25224a861ccc101a24b0b2741d30efb71d81d03fa00ca476bf8339c1786d9c46f2

    • SSDEEP

      6144:9c9wE0Q11JQ1S+OWMYU7nUXxOwblnsAPe+Eg:9c9wE0Q11JQE+kY1SA1

    Score
    1/10
    behavioral10behavioral9

    • Target

      Kelmis_Data/Managed/Mono.Security.dll

    • Size

      302KB

    • MD5

      d1b792d07b0e08ef190eb6ef5361e6f3

    • SHA1

      36890188d80598132d63561ded707e641282f2a1

    • SHA256

      2b7651b398dc63af0dbc0038758981c29238a495681a7ed487357a464ad4de15

    • SHA512

      1229d49068401a078b81ee398524327ccdebcd2fb6134c980d643b76f075244f2670d0773aa35027aa8b8d40ad6c29f16a223b142f3a6595c3641c32c8c31215

    • SSDEEP

      6144:+JvWNTGENjTzSQfGFzPTzcyaksosrNn95tq:fmFz9mN

    Score
    1/10
    behavioral11behavioral12

    • Target

      Kelmis_Data/Managed/System.Configuration.dll

    • Size

      122KB

    • MD5

      d0a550f30b09ac8e5f49ad6d7daab4c4

    • SHA1

      d502b45d880866d8608a5795033390ffde6df6a1

    • SHA256

      cd5793957604e1448443da0d703f29a31100d4a7030c140121c7ddf6b2027d94

    • SHA512

      e24f1d15a5017ac034a52bb8e3466912199b45d75f0d3e4b03d3ed604bdf67f1109a75660ed22c1219973c5c6b3f33692777112fbdf14b5597ef967ecea395da

    • SSDEEP

      3072:JH3xt3GrHyTALVXzA4k8y3Kpn5WJzL0MIeZH4+:JH3DcSTSVDMJM

    Score
    1/10
    behavioral13behavioral14

    • Target

      Kelmis_Data/Managed/System.Core.dll

    • Size

      1021KB

    • MD5

      ee54cdd0260259a087442949da49f50a

    • SHA1

      49aafc2caeb908ccc8f8598414a317cc2cebf9c2

    • SHA256

      d982f54622edc2ed4637fe547b70907f589a2ae4de4b6d604c54ee35f97dca03

    • SHA512

      09af08ef2c72dea7ccf440e168a684e35bca1eba96d6276e8a3855be270ee8c91b92869b415622679f6dea95c29b096001b756d1ca7c58dff98a3b666a9e56d4

    • SSDEEP

      12288:GDQR1+Dy+BcB5Qud7DfVsL9KVI36owJKbYvB54wkHXdt:bn+BE5jVsEWIWYvB5

    Score
    1/10
    behavioral15behavioral16

    • Target

      Kelmis_Data/Managed/System.Drawing.dll

    • Size

      586KB

    • MD5

      510e18d64827f314e96ad00cd7ba3de9

    • SHA1

      dfce03403072475291a61e7930b0a2a110d4738a

    • SHA256

      405a1529a2fdb2a63fc3e85769ed384a745e06598eb653f7d9ee43e7d355b9f1

    • SHA512

      0b9d09eece2338a9eadeb5903fdf4f65b97e494b287631026bf6da1b3c7c20d43772981de2328d014f650fadb0d76d38444a30ba336756d2b15172653b7de53a

    • SSDEEP

      6144:vcDW1iUg2l/k2x4SmLXa0T272EBxhbBFqfOoqDBJsCYCMVgKPafdPX8cHsl6WvOo:piUl/kjSmLXaRBv8pgCalvo6Wsqd

    Score
    1/10
    behavioral17behavioral18

    • Target

      Kelmis_Data/Managed/System.Security.dll

    • Size

      180KB

    • MD5

      915fb88087c6ce36daa02bca9daff3dc

    • SHA1

      ce5bb0edb6e50c70b0cf188dd875c257da76e627

    • SHA256

      c931417eb4690730438d7c93d1cf6e1864695d8d90a5833fe83298802a84ee58

    • SHA512

      07c4a7d5a656bbef00deae0b814be51eba0348e678f562a78881a81b9850605838d9061341904e8d0ad13ebb47c09d2d7023de1607f8cd8f1d97b83b6260ce58

    • SSDEEP

      3072:Xr8JG/QlTReXnVzW72nDLR1RNdxz9nI/K6ZoedXHpnZQeU1GGeEebgUKFzODhSK0:Xr8JpeXnVzW72nDLhZz9J4oQJZQeBGeR

    Score
    1/10
    behavioral19behavioral20

    • Target

      Kelmis_Data/Managed/System.Xml.dll

    • Size

      3.0MB

    • MD5

      5fdd663f389f7f6e5daad28de3adfa7e

    • SHA1

      8005284d37619470874c99383202d0fb135c9f8d

    • SHA256

      340ef89526404ea0a8161efcea85216efaae956f09fe28a01f565d40de38e683

    • SHA512

      e5cfd590bd1c95fee61d3c6ee0ab3685ea0812e1046022c163e3e5463af0d2f4187d208e3925ba90717e35fadf030a4d994a3fcfe5fb9ee2b50b576d3898b0ba

    • SSDEEP

      49152:G6V0g55GkLfaEam1yJ6hT+Lq4BpqgAq7LyPYas38PXNtH7U8Yn:z0g55e6l+Lq4Bpqgv

    Score
    1/10
    behavioral21behavioral22

    • Target

      Kelmis_Data/Managed/System.dll

    • Size

      2.6MB

    • MD5

      1517a46d24e4ee3caf8fceb42b515758

    • SHA1

      7b5fc013f86d0f769ded17b1e3d908236a2db2b5

    • SHA256

      3890f3a0b81e8f915b8e07ba89f4a9830f480574ac147b23c6d338ca2f1ecb81

    • SHA512

      762682b541b39737c682e0d9a9eaa46fd96624c350e0ba1620124fb662da379373d1eb397e7268154ed2c3eef5dfd076fb86abdcc6aa97e541d897aac99d1ec9

    • SSDEEP

      49152:Na2TMRPYcHGxrA5k41BIuGRR96B7pUuzsc:gFPYCSs5kOI

    Score
    1/10
    behavioral23behavioral24

    • Target

      Kelmis_Data/Managed/Unity.TextMeshPro.dll

    • Size

      360KB

    • MD5

      4209252c6db75edaabc367585a8feddb

    • SHA1

      c239827868a52e5ea0705d2b6ccc356575d22952

    • SHA256

      e89ea9ccdbd26a09709c9096d5f37ea13e3ebb5f29dfd77a54003297ba12c221

    • SHA512

      9c0d51501d5004757fc4157563ca20aae6ebf8db018336dd64408a3f09d20ac33c716050c1adca1018f5de5265950b2fb33c795f6b9656a264ca41c48a027153

    • SSDEEP

      6144:PAP6Rb6oZYzni2qXsY2NPq68gWamJzKcWYdSoZEIPTz0A9vTuV4vy9NsTH9ztRTW:oP6Rb6oYznwgWa0zKcWYdSoZEIPTzD9S

    Score
    1/10
    behavioral25behavioral26

    • Target

      Kelmis_Data/Managed/Unity.Timeline.dll

    • Size

      109KB

    • MD5

      e1ae1f14c13c1617631a1443b9a6af17

    • SHA1

      5c39c639b4f84322cb9e8b4494d45d9c3a0da261

    • SHA256

      d55949203a7ac5fd20ef3a7eaa6708f031f903e9753816d04c6cd378eadba741

    • SHA512

      33ebc44c2b7e78eef5bd802cb58e27e05515ce7002c459198149bc5f4f18c268bf870226481edb8ee6007bd639b27705fd6b73c60cffb05f80b2fe0e896054a2

    • SSDEEP

      1536:iCsLwmu66rKratNnqMjpzXgCf9sxOFto8GjBPrk1RhlEpQZ43O608Mkj9SB3y8AK:i1Aze4NvzXgMGd8GFPrknOh+67jU

    Score
    1/10
    behavioral27behavioral28

    • Target

      Kelmis_Data/Managed/UnityEngine.AIModule.dll

    • Size

      44KB

    • MD5

      6b58e39b9eb47a84b3971ee954863be8

    • SHA1

      d0a7326f8aeb28d4c6eb1d23c44cbda634b001da

    • SHA256

      744fb3c54b08eb7ce4edb8fba796340bf7d567b92e4a479ef047af6ae385014f

    • SHA512

      72be2e0335115c30e9ae900e3c07be51fd793c1ec2719d2c0473e90a6d934d10bedb0171bf4a7318122cc1e947436c8f3b270b27088dca898ce6dab10d7225ef

    • SSDEEP

      768:hbc5nUbjYVOMBemKv2pEq3zQWR8Br2ZYq/woOJCqIghjkjhV:Bc5UbjYVlcWM7rYgoOJCqIghjkjhV

    Score
    1/10
    behavioral29behavioral30

    • Target

      Kelmis_Data/Managed/UnityEngine.ARModule.dll

    • Size

      10KB

    • MD5

      b89d90c7e16bdef0f0b8f3214489b1ea

    • SHA1

      a580034ea68fbec0940763bd3d8aa0a7ef24f90b

    • SHA256

      9d9d9f7cbb8d9e7fcf327906a8ab413fc4060877bbe7242e50cbf06a8a155f6d

    • SHA512

      0d8280ad4ab2b61cda71116399cae9966dca2f181eb5307429ab9aa90c2fceee9e90b670ced1c86d349bae6dbdc895491c7019e3e419da19b69968738d29bf90

    • SSDEEP

      192:s+Dvaksmg+tmO97CqQD0ZUz2hjkjcjO1Vs:s+qmg+0OJCqQDZz2hjkjcjO3

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks