8c2fb988b94fb4e30b0ecdcafd007e99b5a823957861663fb4f806c8ee8f884c

Login
Reports

Overview

overview

Static

static

KinitoPET-...in.zip

windows11-21h2-x64

KinitoPET-...al.png

windows11-21h2-x64

KinitoPET-...l2.png

windows11-21h2-x64

KinitoPET-...it.mp3

windows11-21h2-x64

KinitoPET-...on.exe

windows11-21h2-x64

KinitoPET-...te.dll

windows11-21h2-x64

KinitoPET-.../1.png

windows11-21h2-x64

KinitoPET-...10.png

windows11-21h2-x64

KinitoPET-.../2.png

windows11-21h2-x64

KinitoPET-.../3.png

windows11-21h2-x64

KinitoPET-.../4.png

windows11-21h2-x64

KinitoPET-.../5.png

windows11-21h2-x64

KinitoPET-.../6.png

windows11-21h2-x64

KinitoPET-.../7.png

windows11-21h2-x64

KinitoPET-.../8.png

windows11-21h2-x64

KinitoPET-.../9.png

windows11-21h2-x64

KinitoPET-...ep.png

windows11-21h2-x64

KinitoPET-...p1.png

windows11-21h2-x64

KinitoPET-...p2.png

windows11-21h2-x64

KinitoPET-...p3.png

windows11-21h2-x64

KinitoPET-...ng.mp3

windows11-21h2-x64

KinitoPET-...ng.mp3

windows11-21h2-x64

KinitoPET-...rf.mp3

windows11-21h2-x64

KinitoPET-...ng.png

windows11-21h2-x64

KinitoPET-...g2.png

windows11-21h2-x64

KinitoPET-...er.mp3

windows11-21h2-x64

KinitoPET-...ne.mp3

windows11-21h2-x64

KinitoPET-...sh.mp3

windows11-21h2-x64

KinitoPET-...ito.py

windows11-21h2-x64

KinitoPET-...DME.md

windows11-21h2-x64

KinitoPET-...pi.exe

windows11-21h2-x64

KinitoPET-...ua.exe

windows11-21h2-x64

Analysis

max time kernel
436s
max time network
449s
platform
windows11-21h2_x64
resource
win11-20240319-en
resource tags

arch:x64arch:x86image:win11-20240319-enlocale:en-usos:windows11-21h2-x64system
submitted
02/04/2024, 12:29

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

KinitoPET-Python-Virtual-Assistant-main.zip

Resource

win11-20240221-en

windows11-21h2-x64

26 signatures

600 seconds

Behavioral task

behavioral2

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/KinitoNormal.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral3

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/KinitoNormal2.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral4

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/NewBeginningsPoemEdit.mp3

Resource

win11-20240214-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral5

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Programs/balcon.exe

Resource

win11-20240319-en

windows11-21h2-x64

2 signatures

600 seconds

Behavioral task

behavioral6

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Programs/libsamplerate.dll

Resource

win11-20240221-en

windows11-21h2-x64

2 signatures

600 seconds

Behavioral task

behavioral7

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/1.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral8

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/10.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral9

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/2.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral10

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/3.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral11

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/4.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral12

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/5.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral13

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/6.png

Resource

win11-20240214-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral14

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/7.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral15

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/8.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral16

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/9.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral17

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral18

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep1.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral19

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep2.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral20

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep3.png

Resource

win11-20240319-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral21

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/StartTalking.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral22

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/StopTalking.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral23

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Surf.mp3

Resource

win11-20240221-en

windows11-21h2-x64

6 signatures

600 seconds

Behavioral task

behavioral24

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Thinking.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral25

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Thinking2.png

Resource

win11-20240214-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral26

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Timer.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral27

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/TinyTune.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral28

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Woosh.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral29

Sample

KinitoPET-Python-Virtual-Assistant-main/Kinito.py

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral30

Sample

KinitoPET-Python-Virtual-Assistant-main/README.md

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral31

Sample

KinitoPET-Python-Virtual-Assistant-main/spchapi.exe

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral32

Sample

KinitoPET-Python-Virtual-Assistant-main/tv_enua.exe

Resource

win11-20240221-en

windows11-21h2-x64

8 signatures

600 seconds

discovery persistence

Report Analysis Logs

General

Target
KinitoPET-Python-Virtual-Assistant-main/GameAssets/Programs/balcon.exe
Size 1.2MB
Sample240402-ppdnkshg9s
SHA256 2ec1945187eeb07aa27052db2e60139bbeb3bf81f8ba549c4a2360363ab4338e
MD5 7f4c5e05a8e37de69a4dd0b861245dac
SHA1 8ab7c4635591b99b15db815fa6e17fbfb44506ac
SHA512 f026dfbe8cec0dd1dbb4e464c40017911ec25ec89521d969a4870777fd59f9681b4d04da247430d291ddb1c376aab5a5784493af916d8d98eaaff8b3f9983459
SSDEEP 24576:34Yz77xtkaEBuAhVguF6H+ZOaEcYcB468mZcVWdyCp6WoWK74yI:UgDVmZcIyRWoWc/I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2700	balcon.exe
2700	balcon.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2700	balcon.exe
2700	balcon.exe

Processes

C:\Users\Admin\AppData\Local\Temp\KinitoPET-Python-Virtual-Assistant-main\GameAssets\Programs\balcon.exe
"C:\Users\Admin\AppData\Local\Temp\KinitoPET-Python-Virtual-Assistant-main\GameAssets\Programs\balcon.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2700-0-0x0000000000400000-0x0000000000537000-memory.dmp

Download

memory/2700-1-0x00000000023E0000-0x00000000023E1000-memory.dmp

Download

memory/2700-2-0x0000000000400000-0x0000000000537000-memory.dmp

Download