8c2fb988b94fb4e30b0ecdcafd007e99b5a823957861663fb4f806c8ee8f884c

Login
Reports

Overview

overview

Static

static

KinitoPET-...in.zip

windows11-21h2-x64

KinitoPET-...al.png

windows11-21h2-x64

KinitoPET-...l2.png

windows11-21h2-x64

KinitoPET-...it.mp3

windows11-21h2-x64

KinitoPET-...on.exe

windows11-21h2-x64

KinitoPET-...te.dll

windows11-21h2-x64

KinitoPET-.../1.png

windows11-21h2-x64

KinitoPET-...10.png

windows11-21h2-x64

KinitoPET-.../2.png

windows11-21h2-x64

KinitoPET-.../3.png

windows11-21h2-x64

KinitoPET-.../4.png

windows11-21h2-x64

KinitoPET-.../5.png

windows11-21h2-x64

KinitoPET-.../6.png

windows11-21h2-x64

KinitoPET-.../7.png

windows11-21h2-x64

KinitoPET-.../8.png

windows11-21h2-x64

KinitoPET-.../9.png

windows11-21h2-x64

KinitoPET-...ep.png

windows11-21h2-x64

KinitoPET-...p1.png

windows11-21h2-x64

KinitoPET-...p2.png

windows11-21h2-x64

KinitoPET-...p3.png

windows11-21h2-x64

KinitoPET-...ng.mp3

windows11-21h2-x64

KinitoPET-...ng.mp3

windows11-21h2-x64

KinitoPET-...rf.mp3

windows11-21h2-x64

KinitoPET-...ng.png

windows11-21h2-x64

KinitoPET-...g2.png

windows11-21h2-x64

KinitoPET-...er.mp3

windows11-21h2-x64

KinitoPET-...ne.mp3

windows11-21h2-x64

KinitoPET-...sh.mp3

windows11-21h2-x64

KinitoPET-...ito.py

windows11-21h2-x64

KinitoPET-...DME.md

windows11-21h2-x64

KinitoPET-...pi.exe

windows11-21h2-x64

KinitoPET-...ua.exe

windows11-21h2-x64

Analysis

max time kernel
441s
max time network
446s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
02/04/2024, 12:29

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

KinitoPET-Python-Virtual-Assistant-main.zip

Resource

win11-20240221-en

windows11-21h2-x64

26 signatures

600 seconds

Behavioral task

behavioral2

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/KinitoNormal.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral3

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/KinitoNormal2.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral4

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/NewBeginningsPoemEdit.mp3

Resource

win11-20240214-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral5

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Programs/balcon.exe

Resource

win11-20240319-en

windows11-21h2-x64

2 signatures

600 seconds

Behavioral task

behavioral6

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Programs/libsamplerate.dll

Resource

win11-20240221-en

windows11-21h2-x64

2 signatures

600 seconds

Behavioral task

behavioral7

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/1.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral8

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/10.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral9

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/2.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral10

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/3.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral11

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/4.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral12

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/5.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral13

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/6.png

Resource

win11-20240214-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral14

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/7.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral15

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/8.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral16

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/SecretImages/9.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral17

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral18

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep1.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral19

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep2.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral20

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Sleep3.png

Resource

win11-20240319-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral21

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/StartTalking.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral22

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/StopTalking.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral23

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Surf.mp3

Resource

win11-20240221-en

windows11-21h2-x64

6 signatures

600 seconds

Behavioral task

behavioral24

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Thinking.png

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral25

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Thinking2.png

Resource

win11-20240214-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral26

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Timer.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral27

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/TinyTune.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral28

Sample

KinitoPET-Python-Virtual-Assistant-main/GameAssets/Woosh.mp3

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral29

Sample

KinitoPET-Python-Virtual-Assistant-main/Kinito.py

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral30

Sample

KinitoPET-Python-Virtual-Assistant-main/README.md

Resource

win11-20240221-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral31

Sample

KinitoPET-Python-Virtual-Assistant-main/spchapi.exe

Resource

win11-20240221-en

windows11-21h2-x64

1 signatures

600 seconds

Behavioral task

behavioral32

Sample

KinitoPET-Python-Virtual-Assistant-main/tv_enua.exe

Resource

win11-20240221-en

windows11-21h2-x64

8 signatures

600 seconds

discovery persistence

Report Analysis Logs

General

Target
KinitoPET-Python-Virtual-Assistant-main/GameAssets/Programs/libsamplerate.dll
Size 128KB
Sample240402-ppdnkshg9s
SHA256 01bb04ec2d815ce30a5b4d9edcada479461d3de31c78532468c398bc4c328505
MD5 1c13e50aec36bbb49b592089ad091128
SHA1 75c46a3864fbe9c7401c980483d0dc323302a479
SHA512 e85178779423e42b9ac4ef64b3a514e0ce5feef19b7b8dbab2ed52a8d10e0edc4268d96a74ff5a4c26c335de81e283f023bd5dcb865c78fd625e3f3e1bfad4fe
SSDEEP 3072:Ae2JVM9hYzqD57pgRY0qr9UPO96Oyz0oulpSX1/2:YtqDFpgROrl811ulp8e
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2520	3104	WerFault.exe	79

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3856 wrote to memory of 3104	3856	rundll32.exe	79
PID 3856 wrote to memory of 3104	3856	rundll32.exe	79
PID 3856 wrote to memory of 3104	3856	rundll32.exe	79

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\KinitoPET-Python-Virtual-Assistant-main\GameAssets\Programs\libsamplerate.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3856
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\KinitoPET-Python-Virtual-Assistant-main\GameAssets\Programs\libsamplerate.dll,#1
  2⤵
  PID:3104
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3104 -s 452
    3⤵
    - Program crash
    PID:2520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3104 -ip 3104
1⤵
PID:2168

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads