6a461cad219e15f5edb255cbdee3202c56adeb9ce1708c65696c8c2c53397819

Sharing

Copy URL Twitter E-mail

General

Target
K&S.rar
Size 47.1MB
Sample240107-x2r1qsdcb2
SHA256 6a461cad219e15f5edb255cbdee3202c56adeb9ce1708c65696c8c2c53397819
MD5 358b3d0f20716b026b61270e2994b0f7
SHA1 c087ac59cbc28dddf12216437984c83b989348e3
SHA512 c900eed324c2fdd06a93bf5630793600f640f3410190b97d3105393fd4e32eb2f34b9245423aa52474056e935cdfd43fbfcf7fcea9932333ee173cce2ab976de
SSDEEP 786432:CmQk4wYi69nJqqQGKItOnAKPcci1El61cz/uWk50zBEavYprTEzgLdfImB+c8Ddo:ArnkFGkBHzz/uWk50zGHbdfImBY9Sq1w
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

pyinstaller

Malware Config

Targets

- Target
  K&S.rar
- Size 47.1MB
- SHA256 6a461cad219e15f5edb255cbdee3202c56adeb9ce1708c65696c8c2c53397819
- MD5 358b3d0f20716b026b61270e2994b0f7
- SHA1 c087ac59cbc28dddf12216437984c83b989348e3
- SHA512 c900eed324c2fdd06a93bf5630793600f640f3410190b97d3105393fd4e32eb2f34b9245423aa52474056e935cdfd43fbfcf7fcea9932333ee173cce2ab976de
- SSDEEP 786432:CmQk4wYi69nJqqQGKItOnAKPcci1El61cz/uWk50zBEavYprTEzgLdfImB+c8Ddo:ArnkFGkBHzz/uWk50zGHbdfImBY9Sq1w
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  Karma.exe
- Size 84.0MB
- SHA256 0ef43d9de4af2dc3fd0dae9ca3533fbd97bff13b5c95ba4c8521d13b0b9683aa
- MD5 711464a82474c913defec443908e21ed
- SHA1 e216b0853a6195acf520a7b5a7b46a1c972b666e
- SHA512 f04a7e4158cd78fa61568c0e306c6b72f3617dd147d8b58b99aa02a34a340a7135c8c4ecec714def1eb7712bde01dbbe8825275d5e9c4819d7e818cc8dea0888
- SSDEEP 393216:36jAPfF3dNPVLCEDLQzH2ciIrHW4H//o3KdUgK1gXuSA:32AjLCEDLQzkIL7/weU9gXuSA
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral3 behavioral4
- Target
  alansito_file.pyc
- Size 4KB
- SHA256 54122eaf566d5ed59be4c9e79c89c7a2bb0daf189e9dbe47233eb097794da5f5
- MD5 c0998c06705c44e0bd6a4cbbf508e71b
- SHA1 1b71de6dc9ccf9f14387dea278758f91375bbe40
- SHA512 92e285981aa9c0c0fc5586e84b81401b7c716694ec63f76dee5e348ee0efb4340c97ceda2107506ba63262f36aa144669fe8ac0831e264c6eac12e2d1f001964
- SSDEEP 96:gfkejdNypus5TLitrIsXiVvaVp+PepA5TN3C9aZAV9fFUupVcgvsA:MkejOzTWsVvaT+Uq3CNfppVc8p
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  Slinky.exe
- Size 82.7MB
- SHA256 b13e38c5c9739c7c0bd920be4f7ebc7d51ab5e6a7e71cefded92ffede85c6152
- MD5 af32a4c8b24a795f4b383f142b9facad
- SHA1 37c991eee4f3d39b08fa88a9b6c27b325651cd0e
- SHA512 80685fcf840527d52006f69d2f4ee840df56516220759d72ac71e82aa9c13874830f4bd34ee6566941b575cbc0c97a7688fc7236e2004b4eaef8fdfca7c525d6
- SSDEEP 393216:0jAPfF3dNPVLCEDLQzH2ciIrHW4H//ozidkjR1ewaOR:gAjLCEDLQzkIL7/w6kfewaOR
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral7 behavioral8
- Target
  alansito_file.pyc
- Size 4KB
- SHA256 80198c823f72268a9f6506f5d54ba13bc87dfd59e03ec4eff52adfc4c8c32381
- MD5 61d8957cd245f62c0ace4729fbffe6c0
- SHA1 9107ab457b521eccc3e4d5bb98f60ceedddcb4be
- SHA512 3614cdbaa7b6dab174cbc04e00088c48cd1938a1dd0d52cf9659dcb072061ee113b3abe4d816197043be4bda6613165ec4457a01a56c9afb8d03f6d03d97187d
- SSDEEP 96:il2wumCdNqY2SyeOjdm0FZ+i6qaUG5fmkJqbAJrkka5:YMdkY2uOIQ+OaUGBPQb2rkf5
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  slinky_library.dll
- Size 18.1MB
- SHA256 16745ae6670eba8a452a5e75fa6142564d31bd3b7d14766e04f1acb214f65703
- MD5 44b5e89a9f7bab889a4df60042872f17
- SHA1 cfc40cd4fdbda75d3ed52952c500d8ccc12f4a36
- SHA512 7f18545da3e4fa726ec33345f7dc137eedf4961a1bd0582b51ee2258a6d5a115187a4e72ec3c7b6d29e33b0a4aa2560adec1833b4bda3f00a7b194ea71d95188
- SSDEEP 393216:kKRqNWNKROYkhkpXorNv+oXsDS3LNK3HOU6x0pW/lJktSrZPLAB:HANWKRrpYrNvou7NK3uU6E29dPL
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral11 behavioral12
- Target
  slinkyhook.dll
- Size 228KB
- SHA256 7c4234fac3b6b3e96dace1e71c7a952ec67e3839f90f7a88a9ea283bf88d25b8
- MD5 6d8c17c67970cb5841811eed8adffffc
- SHA1 c869ab32318a035e51aff8e5e11b4cd25fb52a4f
- SHA512 7d2a0ffcd72c8bf4a96b2ed722d7119749ec14f5d7e6a601cb6ae4a5b1c4a652b694158f01da340e3ca4751cabd0a56c42bf739d8b421e36937f3691b3b80c72
- SSDEEP 3072:hXxN1I6PgabbAzVxPLI5oIa5amK/1o4ptgELHY1lNyc+m+e7P26g66OVuknsDe0u:hhN1GFZq/15tFc+m97ieuknsDu
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14