Overview

overview

8

Static

static

3

Kido/Clean...us.exe

windows7-x64

1

Kido/Clean...us.exe

windows10-2004-x64

1

Kido/KIDO_...cn.exe

windows7-x64

1

Kido/KIDO_...cn.exe

windows10-2004-x64

1

Kido/MSVCCL.exe

windows7-x64

1

Kido/MSVCCL.exe

windows10-2004-x64

1

Kido/Servi...ON.dll

windows7-x64

1

Kido/Servi...ON.dll

windows10-2004-x64

1

Kido/Servi...ON.exe

windows7-x64

8

Kido/Servi...ON.exe

windows10-2004-x64

8

Kido/Set_P...on.exe

windows7-x64

1

Kido/Set_P...on.exe

windows10-2004-x64

1

Kido/Set_P...rm.exe

windows7-x64

1

Kido/Set_P...rm.exe

windows10-2004-x64

1

Kido/SvcHostEnm.exe

windows7-x64

3

Kido/SvcHostEnm.exe

windows10-2004-x64

7

Kido/Updat...05.exe

windows7-x64

1

Kido/Updat...05.exe

windows10-2004-x64

1

Kido/browlog.exe

windows7-x64

1

Kido/browlog.exe

windows10-2004-x64

1

Kido/ghp2.exe

windows7-x64

1

Kido/ghp2.exe

windows10-2004-x64

1

Kido/updateset.exe

windows7-x64

8

Kido/updateset.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f3084aa54c74d96b344e450b1fafd7b

  • Size

    728KB

  • MD5

    0f3084aa54c74d96b344e450b1fafd7b

  • SHA1

    7fa7a3ce0f154769639b9e0c32c62230af742225

  • SHA256

    ebbf91e5a110ed1c42b87217dbe8a9ceddfaee87a02125f42697e96b5f76cbdc

  • SHA512

    b1be0eb47ef7b28f9ac2810d5faaa15cc0dc6bdb4c9d89c67eb4a6e54f023eaff75e7adbba2e74933266f9de2d9bde7a3e0ef10cb637f266702886616f01bb39

  • SSDEEP

    12288:sJF8OmL1dvUTnDMwaeHLMKrD5YiwstgvHbJF8OmL1dtITH+tLnqCSVCrRDb47dhS:WFSxWfKWlrDLwstaFSxDc6LnqCSVCrRf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f3084aa54c74d96b344e450b1fafd7b
    .zip
  • Kido/CleanSvcVirus.exe
    .exe windows:4 windows x86 arch:x86

    5de2fb7c5b3faf8bd89e799e95307697


    Headers

    Imports

    Sections

  • Kido/KIDO_CLNR/Kid-Scn.exe
    .exe windows:4 windows x86 arch:x86

    78fe725e5d47f682665ed4848d30e94e


    Headers

    Imports

    Sections

  • Kido/KIDO_CLNR/Kido.db
  • Kido/MSVCCL.EXE
    .exe windows:4 windows x86 arch:x86

    11fc5d11355a12e9b808f8fb9e378382


    Headers

    Imports

    Sections

  • Kido/Readme.txt.txt
  • Kido/Service/NPNON.dll
    .dll windows:4 windows x86 arch:x86

    979d376a93acfe09aa5f7356b00e2943


    Headers

    Imports

    Sections

  • Kido/Service/NPNON.exe
    .exe windows:4 windows x86 arch:x86

    481217fb1b2e39b49f416237c784fbd7


    Headers

    Imports

    Sections

  • Kido/Set_Perm/SetPermission.exe
    .exe windows:4 windows x86 arch:x86

    ce606ef74b9f69d64cf077d6e869e311


    Headers

    Imports

    Sections

  • Kido/Set_Perm/regperm.exe
    .exe windows:4 windows x86 arch:x86

    52da7a189ba1fb414d6d5deb79355148


    Headers

    Imports

    Sections

  • Kido/SvcHostEnm.exe
    .exe windows:4 windows x86 arch:x86

    54d97637252810cd3e80bcfc2ff12705


    Headers

    Imports

    Sections

  • Kido/Update NP2005.exe
    .exe windows:4 windows x86 arch:x86

    56d1375e6dc617a13a8b6cbb94d0b078


    Headers

    Imports

    Sections

  • Kido/browlog.exe
    .exe windows:4 windows x86 arch:x86

    11fc5d11355a12e9b808f8fb9e378382


    Headers

    Imports

    Sections

  • Kido/db.ini
  • Kido/ghp2.exe
    .exe windows:4 windows x86 arch:x86

    9c51078c1ca96db482ad433c601b8be2


    Headers

    Imports

    Sections

  • Kido/updateset.exe
    .exe windows:4 windows x86 arch:x86

    b9c4b34c4b7df84068af403558f18dbd


    Headers

    Imports

    Sections