8c29c115f7865607a4e3faf17dfaf5ba944d77ba3775d5df48506383023592b3

General

Target

Kiwi X Executor.exe
Size

10.9MB
Sample

240218-3bcq1sfh48
MD5

41d1f658cbc4b2d6d0efdc3ad57a586f
SHA1

1d42d724593ce5d8e5a9efa861593a9e9cf34d37
SHA256

8c29c115f7865607a4e3faf17dfaf5ba944d77ba3775d5df48506383023592b3
SHA512

56937dc8c5a49fd9e33a1733ab0aca8bbcc4a7230db8d7436bd741003a1a658816c336b44eccb573fb91fefd910c6f0231f1eaffa81b62f0165ea7d1e3679a9d
SSDEEP

196608:D8iYq5pjxAwA/THcNwTAlAWzN+PpC6UQJlU/rnsfx+KNZeYez8aQHD2peixM:DdTtxAwAb8NwT1I+Z7inI+sZh/HKpRM

Score

8^/10

Malware Config

Targets

- Target
  
  Kiwi X Executor.exe
- Size
  
  10.9MB
- MD5
  
  41d1f658cbc4b2d6d0efdc3ad57a586f
- SHA1
  
  1d42d724593ce5d8e5a9efa861593a9e9cf34d37
- SHA256
  
  8c29c115f7865607a4e3faf17dfaf5ba944d77ba3775d5df48506383023592b3
- SHA512
  
  56937dc8c5a49fd9e33a1733ab0aca8bbcc4a7230db8d7436bd741003a1a658816c336b44eccb573fb91fefd910c6f0231f1eaffa81b62f0165ea7d1e3679a9d
- SSDEEP
  
  196608:D8iYq5pjxAwA/THcNwTAlAWzN+PpC6UQJlU/rnsfx+KNZeYez8aQHD2peixM:DdTtxAwAb8NwT1I+Z7inI+sZh/HKpRM
Score

8^/10

spyware stealer upx
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1
- Target
  
  $PLUGINSDIR/INetC.dll
- Size
  
  25KB
- MD5
  
  40d7eca32b2f4d29db98715dd45bfac5
- SHA1
  
  124df3f617f562e46095776454e1c0c7bb791cc7
- SHA256
  
  85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
- SHA512
  
  5fd4f516ce23fb7e705e150d5c1c93fc7133694ba495fb73101674a528883a013a34ab258083aa7ce6072973b067a605158316a4c9159c1b4d765761f91c513d
- SSDEEP
  
  384:pjj9e9dE95XD+iTx58Y5oMM3O9MEoLr1VcQZ/ZwcSyekMRlZ4L4:dAvE90GuY2tO93oLrJRM7Z4E
Score

3^/10
behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  4add245d4ba34b04f213409bfe504c07
- SHA1
  
  ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA256
  
  9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- SHA512
  
  1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP
  
  192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
Score

3^/10
behavioral3
- Target
  
  $PLUGINSDIR/idman641build3.exe
- Size
  
  10.8MB
- MD5
  
  d82cd880f4ab8a8e574c1cc049c99304
- SHA1
  
  390579e601945cbbd122dc1aefba1b94e1efee2c
- SHA256
  
  e3f599ddfddd248d8c94dd88297b69166860c722b9a2b1e6fdc40c34ff367ab0
- SHA512
  
  18c2481255b237c3c73d8b0105ba32a41659fcf3c85f5174ea8f6808dde11fe057591513f4a3add2667f6d461ecd9a66c14e5baa2fdef87c6cfec817606d4b66
- SSDEEP
  
  196608:UYq5pjxAwA/THcNwTAlAWzN+PpC6UQJlU/rnsfx+KNZeYez8aQHD2peix:UTtxAwAb8NwT1I+Z7inI+sZh/HKpR
Score

4^/10
behavioral4
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  1d8f01a83ddd259bc339902c1d33c8f1
- SHA1
  
  9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA256
  
  4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- SHA512
  
  28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP
  
  96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
Score

3^/10
behavioral5