Overview

overview

7

Static

static

3

Krnl.exe

windows7-x64

3

Krnl.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Krnl.exe

  • Size

    1.8MB

  • Sample

    240517-xr94kaeb48

  • MD5

    e9cdcd3816bbd105ca2f309af36bc16d

  • SHA1

    fc3fdd5e7fa88defdf76b8307b0fa2be48a45db4

  • SHA256

    c24855d316a3f7e445035168a2f03dd09d8e69ae35cd4c3d1c27674288383896

  • SHA512

    c8aa7fa445539017aaf09936f308c9743c1d1cfcf00ebc98ede98212e22acf8ea7d8738a9d11b759910af866b1d0786e4850bdd12a9fc7002d2d9d4cef5c3867

  • SSDEEP

    24576:ePABanooMW/8umFbh8A0SsKFucT+KNgxysc5U7ecSgL6y+gk+rnxdarFsP:eP1uB0SV1+KSxyr5UzS65+x+rnxYruP

Score
7/10
microsoftphishing

Malware Config

Targets

    • Target

      Krnl.exe

    • Size

      1.8MB

    • MD5

      e9cdcd3816bbd105ca2f309af36bc16d

    • SHA1

      fc3fdd5e7fa88defdf76b8307b0fa2be48a45db4

    • SHA256

      c24855d316a3f7e445035168a2f03dd09d8e69ae35cd4c3d1c27674288383896

    • SHA512

      c8aa7fa445539017aaf09936f308c9743c1d1cfcf00ebc98ede98212e22acf8ea7d8738a9d11b759910af866b1d0786e4850bdd12a9fc7002d2d9d4cef5c3867

    • SSDEEP

      24576:ePABanooMW/8umFbh8A0SsKFucT+KNgxysc5U7ecSgL6y+gk+rnxdarFsP:eP1uB0SV1+KSxyr5UzS65+x+rnxYruP

    Score
    7/10
    microsoftphishing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks