Overview
overview
9Static
static
7Kiddoins m....0.zip
windows7-x64
1Kiddoins m....0.zip
windows10-2004-x64
1config.json
windows7-x64
3config.json
windows10-2004-x64
3modest-menu.exe
windows7-x64
9modest-menu.exe
windows10-2004-x64
9scripts/Readme.api
windows7-x64
3scripts/Readme.api
windows10-2004-x64
3scripts/demo.lua
windows7-x64
3scripts/demo.lua
windows10-2004-x64
3scripts/menu.lua
windows7-x64
3scripts/menu.lua
windows10-2004-x64
3scripts/si...xample
windows7-x64
3scripts/si...xample
windows10-2004-x64
3scripts/vehicle.lua
windows7-x64
3scripts/vehicle.lua
windows10-2004-x64
3scripts/weapon.lua
windows7-x64
3scripts/weapon.lua
windows10-2004-x64
3themes.json
windows7-x64
3themes.json
windows10-2004-x64
3Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
15-06-2024 19:22
Behavioral task
behavioral1
Sample
Kiddoins menu_v1.0.0.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Kiddoins menu_v1.0.0.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
config.json
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
config.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
modest-menu.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
modest-menu.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
scripts/Readme.api
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
scripts/Readme.api
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
scripts/demo.lua
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
scripts/demo.lua
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
scripts/menu.lua
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
scripts/menu.lua
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
scripts/sirius.lua.example
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
scripts/sirius.lua.example
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
scripts/vehicle.lua
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
scripts/vehicle.lua
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
scripts/weapon.lua
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
scripts/weapon.lua
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
themes.json
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
themes.json
Resource
win10v2004-20240508-en
General
-
Target
scripts/menu.lua
-
Size
1KB
-
MD5
9596bef3ecd38e99364eb58e56cd49be
-
SHA1
676b733db5bb30bdb7824024a1c2fc045a27b4f1
-
SHA256
4a7d7886622501f6b6728a0e9860fe81a1c90fd0e5f2fbe7ff94524e05e0b6b8
-
SHA512
f2d1b11964181b3017f12f381bc241688f18efb3901acd6697ce0ba462693ac947e1d576d88de08b8e8798680cc4e640c5ec1aa4b2a0f4ad6739904f48ce7665
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 2404 OpenWith.exe