Overview

overview

7

Static

static

1

KLSetup.exe

windows10-1703-x64

1

KLSetup.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KLSetup.exe

  • Size

    8.2MB

  • Sample

    240501-hvveyscf62

  • MD5

    7a6436629a7b09b2213589bc671d3432

  • SHA1

    c27069f89a57acea72a1346949406eb7f94cfa52

  • SHA256

    bdcd9f5eec736e493ead3ad3a6ea517e4ec3a6525819f6e3761af02828089d5f

  • SHA512

    71d60f2d4dcf1d92cf5be5eefdab7584ea4bdd9c4bea545bf47749a5b6ad7a4145e3306587447e2a243cfac24f3242a09a20309155a99a7440ec130154457f12

  • SSDEEP

    98304:pEo5z/yF0ULxVuZ6xfqGeUVSO6HVyW2iI30Ge2JW9GU5M0xZE:pt5zqF0KqlXV/luWUU666

Score
7/10
discovery

Malware Config

Targets

    • Target

      KLSetup.exe

    • Size

      8.2MB

    • MD5

      7a6436629a7b09b2213589bc671d3432

    • SHA1

      c27069f89a57acea72a1346949406eb7f94cfa52

    • SHA256

      bdcd9f5eec736e493ead3ad3a6ea517e4ec3a6525819f6e3761af02828089d5f

    • SHA512

      71d60f2d4dcf1d92cf5be5eefdab7584ea4bdd9c4bea545bf47749a5b6ad7a4145e3306587447e2a243cfac24f3242a09a20309155a99a7440ec130154457f12

    • SSDEEP

      98304:pEo5z/yF0ULxVuZ6xfqGeUVSO6HVyW2iI30Ge2JW9GU5M0xZE:pt5zqF0KqlXV/luWUU666

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks