Overview
overview
5Static
static
3AddOn/Main...On.dll
windows10-2004-x64
1Documents/KxRun.exe
windows10-2004-x64
3Documents/...DE.pdf
windows10-2004-x64
1Documents/...EN.pdf
windows10-2004-x64
1Documents/...ES.pdf
windows10-2004-x64
1Documents/...FR.pdf
windows10-2004-x64
1Documents/...IT.pdf
windows10-2004-x64
1Documents/...JA.pdf
windows10-2004-x64
1Documents/...NL.pdf
windows10-2004-x64
1Documents/...PT.pdf
windows10-2004-x64
1Documents/...RU.pdf
windows10-2004-x64
1KMNV.dll
windows10-2004-x64
1KNV LA/License_DE.rtf
windows10-2004-x64
1KNV LA/License_EN.rtf
windows10-2004-x64
1KNV LA/License_ES.rtf
windows10-2004-x64
1KNV LA/License_FR.rtf
windows10-2004-x64
1KNV LA/License_IT.rtf
windows10-2004-x64
1KNV LA/License_JA.rtf
windows10-2004-x64
1KNV LA/License_KO.rtf
windows10-2004-x64
1KNV LA/License_NL.rtf
windows10-2004-x64
1KNV LA/Lic...BR.rtf
windows10-2004-x64
1KNV LA/License_RU.rtf
windows10-2004-x64
1KNV LA/Lic...CH.rtf
windows10-2004-x64
1KNV LA/Lic...CH.rtf
windows10-2004-x64
1KNV/Netviewer.exe
windows10-2004-x64
3KmInst32.exe
windows10-2004-x64
1KmInst64.exe
windows10-2004-x64
1KmInstall.exe
windows10-2004-x64
5Readme.html
windows10-2004-x64
1Readme_j.html
windows10-2004-x64
1Setup.exe
windows10-2004-x64
1support/Setup.exe
windows10-2004-x64
5Analysis
-
max time kernel
449s -
max time network
454s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
03-06-2024 18:16
Behavioral task
behavioral1
Sample
AddOn/MainTargetAddOn.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
Documents/KxRun.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Documents/Net Viewer User Guide DE.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral4
Sample
Documents/Net Viewer User Guide EN.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
Documents/Net Viewer User Guide ES.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
Documents/Net Viewer User Guide FR.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Documents/Net Viewer User Guide IT.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral8
Sample
Documents/Net Viewer User Guide JA.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Documents/Net Viewer User Guide NL.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral10
Sample
Documents/Net Viewer User Guide PT.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
Documents/Net Viewer User Guide RU.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral12
Sample
KMNV.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
KNV LA/License_DE.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral14
Sample
KNV LA/License_EN.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
KNV LA/License_ES.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
KNV LA/License_FR.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
KNV LA/License_IT.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral18
Sample
KNV LA/License_JA.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
KNV LA/License_KO.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral20
Sample
KNV LA/License_NL.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
KNV LA/License_PT-BR.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral22
Sample
KNV LA/License_RU.rtf
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
KNV LA/License_SCH.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral24
Sample
KNV LA/License_TCH.rtf
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
KNV/Netviewer.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral26
Sample
KmInst32.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
KmInst64.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral28
Sample
KmInstall.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
Readme.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral30
Sample
Readme_j.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
Setup.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral32
Sample
support/Setup.exe
Resource
win10v2004-20240508-en
General
-
Target
KNV/Netviewer.exe
-
Size
1.4MB
-
MD5
14e789071d2084087642f4660fc35566
-
SHA1
8628dc2a87b961ea60cd9df38b230b4ee74a1712
-
SHA256
51b9f691c5d7253396295fa57e5e2cf8a62c365ffe07bf810815c67b2640392d
-
SHA512
775f846c474bebe3b9a819f2ba50f511c80b1f60ce802bfcfdcab8c54d2674abffc847b141a33e1801f3ef4d867bcd6730efab1d6d882c53602730de8436de80
-
SSDEEP
24576:3n++BCabKJEFdNNJEFdNbqJEFdNPJEFdN5JEFdNWJEFdNiaEFdN+:vdbiEFdNPEFdNGEFdNxEFdNbEFdNOEFn
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2752 2520 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\KNV\Netviewer.exe"C:\Users\Admin\AppData\Local\Temp\KNV\Netviewer.exe"1⤵PID:2520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2520 -s 8722⤵
- Program crash
PID:2752
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2520 -ip 25201⤵PID:4848