Overview
overview
7Static
static
3K&S.rar
windows7-x64
1K&S.rar
windows10-2004-x64
1Karma.exe
windows7-x64
7Karma.exe
windows10-2004-x64
alansito_file.pyc
windows7-x64
3alansito_file.pyc
windows10-2004-x64
3Slinky.exe
windows7-x64
7Slinky.exe
windows10-2004-x64
alansito_file.pyc
windows7-x64
3alansito_file.pyc
windows10-2004-x64
3slinky_library.dll
windows7-x64
5slinky_library.dll
windows10-2004-x64
5slinkyhook.dll
windows7-x64
1slinkyhook.dll
windows10-2004-x64
1Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
07/01/2024, 19:21
Behavioral task
behavioral1
Sample
K&S.rar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
K&S.rar
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Karma.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Karma.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
alansito_file.pyc
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
alansito_file.pyc
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Slinky.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Slinky.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
alansito_file.pyc
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
alansito_file.pyc
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
slinky_library.dll
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
slinky_library.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
slinkyhook.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
slinkyhook.dll
Resource
win10v2004-20231222-en
General
-
Target
alansito_file.pyc
-
Size
4KB
-
MD5
c0998c06705c44e0bd6a4cbbf508e71b
-
SHA1
1b71de6dc9ccf9f14387dea278758f91375bbe40
-
SHA256
54122eaf566d5ed59be4c9e79c89c7a2bb0daf189e9dbe47233eb097794da5f5
-
SHA512
92e285981aa9c0c0fc5586e84b81401b7c716694ec63f76dee5e348ee0efb4340c97ceda2107506ba63262f36aa144669fe8ac0831e264c6eac12e2d1f001964
-
SSDEEP
96:gfkejdNypus5TLitrIsXiVvaVp+PepA5TN3C9aZAV9fFUupVcgvsA:MkejOzTWsVvaT+Uq3CNfppVc8p
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3856 OpenWith.exe