Overview

overview

8

Static

static

3

kido/Clean...us.exe

windows7-x64

1

kido/Clean...us.exe

windows10-2004-x64

1

kido/KIDO_...cn.exe

windows7-x64

1

kido/KIDO_...cn.exe

windows10-2004-x64

1

kido/MSVCCL.exe

windows7-x64

1

kido/MSVCCL.exe

windows10-2004-x64

1

kido/Servi...ON.dll

windows7-x64

1

kido/Servi...ON.dll

windows10-2004-x64

1

kido/Servi...ON.exe

windows7-x64

8

kido/Servi...ON.exe

windows10-2004-x64

8

kido/Set_P...on.exe

windows7-x64

1

kido/Set_P...on.exe

windows10-2004-x64

1

kido/Set_P...rm.exe

windows7-x64

1

kido/Set_P...rm.exe

windows10-2004-x64

1

kido/SvcHostEnm.exe

windows7-x64

3

kido/SvcHostEnm.exe

windows10-2004-x64

7

kido/Updat...05.exe

windows7-x64

1

kido/Updat...05.exe

windows10-2004-x64

1

kido/browlog.exe

windows7-x64

1

kido/browlog.exe

windows10-2004-x64

1

kido/ghp2.exe

windows7-x64

1

kido/ghp2.exe

windows10-2004-x64

1

kido/updateset.exe

windows7-x64

8

kido/updateset.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    79086889a43a976590775b3ac4cefa03

  • Size

    728KB

  • MD5

    79086889a43a976590775b3ac4cefa03

  • SHA1

    857059d7fb3b9bc7093ed651cfa382c68c379fcf

  • SHA256

    a54d4fa37b4a3df54e16027c85c17ee8f72be8388d12326b1e2a929413a44153

  • SHA512

    af00ce068bc012ed695173b238981f828fec9e0b6adea50d2d72feaad85ba62f720c1cf648fc2f7458b6cdafc29a606ecd7bbd95d36a981fdd2fc56fe5d7e6b1

  • SSDEEP

    12288:MJF8OmL1dPqTnDMwaeHLMKrD5YiwetAvH7JF8OmL1d3oTB+NLnqCSVCrRDb47dhM:2FSx8fKWlrDLwetaFSxxCaLnqCSVCrRj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • 79086889a43a976590775b3ac4cefa03
    .zip
  • kido/CleanSvcVirus.exe
    .exe windows:4 windows x86 arch:x86

    5de2fb7c5b3faf8bd89e799e95307697


    Headers

    Imports

    Sections

  • kido/DataFile.txt
  • kido/KIDO_CLNR/Kid-Scn.exe
    .exe windows:4 windows x86 arch:x86

    78fe725e5d47f682665ed4848d30e94e


    Headers

    Imports

    Sections

  • kido/KIDO_CLNR/Kido.db
  • kido/MSVCCL.EXE
    .exe windows:4 windows x86 arch:x86

    11fc5d11355a12e9b808f8fb9e378382


    Headers

    Imports

    Sections

  • kido/Readme.txt.txt
  • kido/Service/NPNON.dll
    .dll windows:4 windows x86 arch:x86

    979d376a93acfe09aa5f7356b00e2943


    Headers

    Imports

    Sections

  • kido/Service/NPNON.exe
    .exe windows:4 windows x86 arch:x86

    481217fb1b2e39b49f416237c784fbd7


    Headers

    Imports

    Sections

  • kido/Set_Perm/SetPermission.exe
    .exe windows:4 windows x86 arch:x86

    ce606ef74b9f69d64cf077d6e869e311


    Headers

    Imports

    Sections

  • kido/Set_Perm/regperm.exe
    .exe windows:4 windows x86 arch:x86

    52da7a189ba1fb414d6d5deb79355148


    Headers

    Imports

    Sections

  • kido/SvcHostEnm.exe
    .exe windows:4 windows x86 arch:x86

    54d97637252810cd3e80bcfc2ff12705


    Headers

    Imports

    Sections

  • kido/Update NP2005.exe
    .exe windows:4 windows x86 arch:x86

    56d1375e6dc617a13a8b6cbb94d0b078


    Headers

    Imports

    Sections

  • kido/browlog.exe
    .exe windows:4 windows x86 arch:x86

    11fc5d11355a12e9b808f8fb9e378382


    Headers

    Imports

    Sections

  • kido/db.ini
  • kido/ghp2.exe
    .exe windows:4 windows x86 arch:x86

    9c51078c1ca96db482ad433c601b8be2


    Headers

    Imports

    Sections

  • kido/updateset.exe
    .exe windows:4 windows x86 arch:x86

    b9c4b34c4b7df84068af403558f18dbd


    Headers

    Imports

    Sections