Overview
overview
10Static
static
1kuro_credi...AD.zip
windows7-x64
1kuro_credi...AD.zip
windows10-2004-x64
1__MACOSX/k...1.jpeg
windows7-x64
3__MACOSX/k...1.jpeg
windows10-2004-x64
3__MACOSX/k...07.png
windows7-x64
3__MACOSX/k...07.png
windows10-2004-x64
3__MACOSX/k...09.png
windows7-x64
3__MACOSX/k...09.png
windows10-2004-x64
3__MACOSX/k...55.mp4
windows7-x64
1__MACOSX/k...55.mp4
windows10-2004-x64
6__MACOSX/k...30.png
windows7-x64
3__MACOSX/k...30.png
windows10-2004-x64
3__MACOSX/k...34.png
windows7-x64
3__MACOSX/k...34.png
windows10-2004-x64
3__MACOSX/k...58.jpg
windows7-x64
3__MACOSX/k...58.jpg
windows10-2004-x64
3__MACOSX/k...59.jpg
windows7-x64
3__MACOSX/k...59.jpg
windows10-2004-x64
3__MACOSX/k...03.mp4
windows7-x64
1__MACOSX/k...03.mp4
windows10-2004-x64
6__MACOSX/k...48.mp4
windows7-x64
1__MACOSX/k...48.mp4
windows10-2004-x64
6__MACOSX/k...72.mp4
windows7-x64
1__MACOSX/k...72.mp4
windows10-2004-x64
6__MACOSX/k...43.png
windows7-x64
3__MACOSX/k...43.png
windows10-2004-x64
3__MACOSX/k...44.png
windows7-x64
3__MACOSX/k...44.png
windows10-2004-x64
3__MACOSX/k...20.mp4
windows7-x64
10__MACOSX/k...20.mp4
windows10-2004-x64
6__MACOSX/k...04.mp4
windows7-x64
10__MACOSX/k...04.mp4
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
kuro_creditAIRHEAD.zip
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
kuro_creditAIRHEAD.zip
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
__MACOSX/kuro_creditAIRHEAD/README/._IMG_7021.jpeg
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
__MACOSX/kuro_creditAIRHEAD/README/._IMG_7021.jpeg
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._IMG_6007.png
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._IMG_6007.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._IMG_6009.png
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._IMG_6009.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._RPReplay_Final1713289455.mp4
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._RPReplay_Final1713289455.mp4
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5930.png
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5930.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5934.png
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5934.png
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5958.jpg
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5958.jpg
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5959.jpg
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5959.jpg
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713233703.mp4
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713233703.mp4
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713233848.mp4
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713233848.mp4
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713234072.mp4
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713234072.mp4
Resource
win10v2004-20240426-en
Behavioral task
behavioral25
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._IMG_3643.png
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._IMG_3643.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._IMG_3644.png
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._IMG_3644.png
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._RPReplay_Final1708977520.mp4
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._RPReplay_Final1708977520.mp4
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._RPReplay_Final1708980504.mp4
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
__MACOSX/kuro_creditAIRHEAD/his weird gf/._RPReplay_Final1708980504.mp4
Resource
win10v2004-20240508-en
General
-
Target
kuro_creditAIRHEAD.zip
-
Size
144.4MB
-
MD5
5bc05579a295adc2c0f4b142c449ad62
-
SHA1
9ca6cd66dde48e31cf52077c7b7127d9b13a916e
-
SHA256
5141be95c9dfa3cb9e4f48389428abfd2d289c358869cb5edcba972876625a63
-
SHA512
5689bbcb5d73a1d5850620d1e84448aa93530b4d3729d88d0e4c00b4ce58aff74cbd6129c94ddb7a0dbfc54ea769a7d5274b408728cbba824237a45c3f4ac727
-
SSDEEP
3145728:l2lIRddHhYkHEyNLG48egMHtd/Kv2JllQ2GsSv2Sr7szh68N:l2laPdNqvQrBJ3SsSvi6q
Malware Config
Signatures
Files
-
kuro_creditAIRHEAD.zip.zip
-
__MACOSX/kuro_creditAIRHEAD/README/._IMG_7021.jpeg
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._IMG_6007.PNG
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._IMG_6009.PNG
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/._RPReplay_Final1713289455.MP4
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5930.PNG
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5934.PNG
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5958.jpg
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._IMG_5959.jpg
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713233703.MP4
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713233848.MP4
-
__MACOSX/kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/._RPReplay_Final1713234072.MP4
-
__MACOSX/kuro_creditAIRHEAD/his weird gf/._IMG_3643.PNG
-
__MACOSX/kuro_creditAIRHEAD/his weird gf/._IMG_3644.PNG
-
__MACOSX/kuro_creditAIRHEAD/his weird gf/._RPReplay_Final1708977520.MP4
-
__MACOSX/kuro_creditAIRHEAD/his weird gf/._RPReplay_Final1708980504.MP4
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_3589.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_3803.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_3804.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_3805.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5152.jpg
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5153.jpg
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5211.jpg
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5622.jpg
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5641.jpg
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5644.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5645.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5646.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5750.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5751.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5831.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5832.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5846.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5847.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5848.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5849.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5853.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5857.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._IMG_5877.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._kuroinstaoutdated.PNG
-
__MACOSX/kuro_creditAIRHEAD/logs/accounts/._kurosfatassgf.PNG
-
__MACOSX/kuro_creditAIRHEAD/what u wanted probably /._socials_softdox.jpeg
-
__MACOSX/kuro_creditAIRHEAD/what u wanted probably /._uglyface.jpeg
-
kuro_creditAIRHEAD/README/IMG_7021.jpeg.jpg
-
kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/IMG_6007.PNG.png
-
kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/IMG_6009.PNG.png
-
kuro_creditAIRHEAD/etc/breach dumps/acccfrrt_tc_dump/RPReplay_Final1713289455.MP4
-
kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/IMG_5930.PNG.png
-
kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/IMG_5934.PNG.png
-
kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/IMG_5958.jpg.jpg
-
kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/IMG_5959.jpg.jpg
-
kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/RPReplay_Final1713233703.MP4
-
kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/RPReplay_Final1713233848.MP4
-
kuro_creditAIRHEAD/etc/breach dumps/acxessdd_ca_dump/RPReplay_Final1713234072.MP4
-
kuro_creditAIRHEAD/his weird gf/IMG_3643.PNG.png
-
kuro_creditAIRHEAD/his weird gf/IMG_3644.PNG.png
-
kuro_creditAIRHEAD/his weird gf/RPReplay_Final1708977520.MP4
-
kuro_creditAIRHEAD/his weird gf/RPReplay_Final1708980504.MP4
-
kuro_creditAIRHEAD/logs/accounts/IMG_3589.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_3803.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_3804.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_3805.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5152.jpg.jpg
-
kuro_creditAIRHEAD/logs/accounts/IMG_5153.jpg.jpg
-
kuro_creditAIRHEAD/logs/accounts/IMG_5211.jpg.jpg
-
kuro_creditAIRHEAD/logs/accounts/IMG_5622.jpg.jpg
-
kuro_creditAIRHEAD/logs/accounts/IMG_5641.jpg.jpg
-
kuro_creditAIRHEAD/logs/accounts/IMG_5644.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5645.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5646.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5750.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5751.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5831.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5832.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5846.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5847.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5848.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5849.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5853.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5857.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/IMG_5877.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/kuroinstaoutdated.PNG.png
-
kuro_creditAIRHEAD/logs/accounts/kurosfatassgf.PNG.png
-
kuro_creditAIRHEAD/what u wanted probably /socials_softdox.jpeg.jpg
-
kuro_creditAIRHEAD/what u wanted probably /uglyface.jpeg.jpg