114346b9660af5c8e7e611f5f88f7658f0327818984f273a28152a560b2b6038 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

KODEK.exe
Size

303KB
Sample

240810-s3rn5szejh
MD5

0c3b5c636e5995003bae5047070b5c84
SHA1

29e046fce753403104042d48aa4d1fc7f46e24e3
SHA256

114346b9660af5c8e7e611f5f88f7658f0327818984f273a28152a560b2b6038
SHA512

46fa27d6ff5c65a3eca579900258e3c3c91cbeda1a7848c94f35a0ed7cad2d4aba92b55a2b80b3d6e5e0dbcc8e87391080782ea2a0bf4753c279bc37f678abcd
SSDEEP

3072:6BpeuELqx8sAblvEmMPER+EgvmYicsPj:6ILqxjVS

Score

8^/10

discovery evasion

Malware Config

Targets

- Target
  
  KODEK.exe
- Size
  
  303KB
- MD5
  
  0c3b5c636e5995003bae5047070b5c84
- SHA1
  
  29e046fce753403104042d48aa4d1fc7f46e24e3
- SHA256
  
  114346b9660af5c8e7e611f5f88f7658f0327818984f273a28152a560b2b6038
- SHA512
  
  46fa27d6ff5c65a3eca579900258e3c3c91cbeda1a7848c94f35a0ed7cad2d4aba92b55a2b80b3d6e5e0dbcc8e87391080782ea2a0bf4753c279bc37f678abcd
- SSDEEP
  
  3072:6BpeuELqx8sAblvEmMPER+EgvmYicsPj:6ILqxjVS
Score

8^/10

discovery evasion
- Disables Task Manager via registry modification
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion