Overview
overview
8Static
static
3Kiwi X.rar
windows7-x64
3Kiwi X.rar
windows10-2004-x64
3Kiwi X/Kiw...config
windows7-x64
3Kiwi X/Kiw...config
windows10-2004-x64
3Kiwi X/Kiw...config
windows7-x64
3Kiwi X/Kiw...config
windows10-2004-x64
3Kiwi X/Mon...se.txt
windows7-x64
1Kiwi X/Mon...se.txt
windows10-2004-x64
1Kiwi X/Mon...nc.txt
windows7-x64
1Kiwi X/Mon...nc.txt
windows10-2004-x64
8Kiwi X/Mon...lf.txt
windows7-x64
1Kiwi X/Mon...lf.txt
windows10-2004-x64
1Kiwi X/Mon...ns.txt
windows7-x64
1Kiwi X/Mon...ns.txt
windows10-2004-x64
1Kiwi X/Mon...lv.txt
windows7-x64
1Kiwi X/Mon...lv.txt
windows10-2004-x64
1Kiwi X/Mon...6x.svg
windows7-x64
1Kiwi X/Mon...6x.svg
windows10-2004-x64
1Kiwi X/Mon...6x.svg
windows7-x64
1Kiwi X/Mon...6x.svg
windows10-2004-x64
1Kiwi X/Mon...in.css
windows7-x64
3Kiwi X/Mon...in.css
windows10-2004-x64
7Kiwi X/Mon...te.svg
windows7-x64
1Kiwi X/Mon...te.svg
windows10-2004-x64
1Kiwi X/WRD...F.json
windows7-x64
3Kiwi X/WRD...F.json
windows10-2004-x64
3Kiwi X/bin/settings
windows7-x64
1Kiwi X/bin/settings
windows10-2004-x64
1Kiwi X/bin/ver.txt
windows7-x64
1Kiwi X/bin/ver.txt
windows10-2004-x64
1Kiwi X/bin...rs.txt
windows7-x64
1Kiwi X/bin...rs.txt
windows10-2004-x64
1Analysis
-
max time kernel
135s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10-05-2024 21:44
Static task
static1
Behavioral task
behavioral1
Sample
Kiwi X.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Kiwi X.rar
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Kiwi X/Kiwi X WPF.exe.config
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Kiwi X/Kiwi X WPF.exe.config
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Kiwi X/Kiwi X.exe.config
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Kiwi X/Kiwi X.exe.config
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
Kiwi X/Monaco/base.txt
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Kiwi X/Monaco/base.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
Kiwi X/Monaco/classfunc.txt
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
Kiwi X/Monaco/classfunc.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Kiwi X/Monaco/globalf.txt
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
Kiwi X/Monaco/globalf.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
Kiwi X/Monaco/globalns.txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Kiwi X/Monaco/globalns.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
Kiwi X/Monaco/globalv.txt
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Kiwi X/Monaco/globalv.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Kiwi X/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
Kiwi X/Monaco/vs/editor/editor.main.css
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Kiwi X/Monaco/vs/editor/editor.main.css
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
Kiwi X/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
Kiwi X/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
Kiwi X/WRDAPICONF.json
Resource
win7-20240215-en
Behavioral task
behavioral26
Sample
Kiwi X/WRDAPICONF.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Kiwi X/bin/settings
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Kiwi X/bin/settings
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
Kiwi X/bin/ver.txt
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
Kiwi X/bin/ver.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Empty Servers.txt
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
Kiwi X/bin/workspace/Blox Fruits Fruit Farm/Empty Servers.txt
Resource
win10v2004-20240426-en
General
-
Target
Kiwi X/Kiwi X.exe.config
-
Size
1KB
-
MD5
1f48b296eae19f30d6abdd9e1fbc1a14
-
SHA1
8529346e5c926a9f4ded49320873f70ec6a7f9d0
-
SHA256
97ca967656db09e3d7046339e5c9e774c179a8d9d7bc72584eb5a8071871c2ec
-
SHA512
c69e5e0b82a27596bc5e2481d580fdd5588036eec6fc13de31e1dfdfe9a6b81882a69c43a3f3f2f145cf17a55cfb2ce4cd28c21291935fa13336a379f040a7ee
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1640 OpenWith.exe