Overview
overview
7Static
static
7TuTutorial - KTNE.rar
windows7-x64
4TuTutorial - KTNE.rar
windows10-2004-x64
7KTNE - Man...ol.pdf
windows7-x64
1KTNE - Man...ol.pdf
windows10-2004-x64
1Tututorial...al.pdf
windows7-x64
1Tututorial...al.pdf
windows10-2004-x64
1Tututorial...NE.exe
windows7-x64
7Tututorial...NE.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
TuTutorial - KTNE.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TuTutorial - KTNE.rar
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
KTNE - Manual en Español.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
KTNE - Manual en Español.pdf
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Tututorial - KTNE/Bomb-Defusal-Manual.pdf
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
Tututorial - KTNE/Bomb-Defusal-Manual.pdf
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Tututorial - KTNE/KTNE.exe
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Tututorial - KTNE/KTNE.exe
Resource
win10v2004-20240221-en
General
-
Target
TuTutorial - KTNE.rar
-
Size
65.5MB
-
MD5
99e47429246a9935b79cc1fa0ad51ea0
-
SHA1
90c95d4d55133820c1824bc09a73354bb3965ed0
-
SHA256
48ddf7dff79ea60daf404c21840c3b0ff1c31bd95111c70887440f6fda9dd5ef
-
SHA512
a8b0c0bcff038f09bce9d29ea0d6ede98db0f3c85668a5108d68ee367d6edb4519eb5c5769f0f97d3ebb61a9e622d416f3e26b58a8df6bd076d42ffd4958c453
-
SSDEEP
1572864:4nhH8rTI314adjf+olgYjfloYO5qhzhT27ZKrhKx5:4hCTwW2fyMf+7whz12700x5
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Tututorial - KTNE/KTNE.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Tututorial - KTNE/KTNE.exe
Files
-
TuTutorial - KTNE.rar.rar
Password: GZ
-
KTNE - Manual en Español.pdf.pdf
Password: GZ
-
Tututorial - KTNE/Bomb-Defusal-Manual.pdf.pdf
Password: GZ
-
Tututorial - KTNE/KTNE.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE