Analysis
-
max time kernel
35s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/04/2024, 23:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KickassUndelete_1.5.5.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
KickassUndelete_1.5.5.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
KickassUndelete_1.5.5.exe
-
Size
193KB
-
MD5
d4367e343e16c4c15040a62690fd14b6
-
SHA1
5028eec50a290557b64e94818af272178f296ea4
-
SHA256
38d4a7d6e5b27327ea833ca54f125e0afe86e2e1bfc47bfd0984049221f7258d
-
SHA512
fc03c1e1c330f69f258bd50ca38fc3925f24a872e07b86cb577a8d35dac9e7006e25d38be62e3cfe8b64cdf7e566e3eab291134ee9ef1bf5a1f3a4d7fc5d45db
-
SSDEEP
3072:dmwk5pKZXBZ9g6JLi0mdotkqpD3uMb1hbP79l+CGT5HfvhBaV:dn+pKt9fJLi0m6tzpDZoNT5Hfv
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: KickassUndelete_1.5.5.exe File opened (read-only) \??\F: KickassUndelete_1.5.5.exe