5c1e9b4ac033e804b0cd0055f4bb326d8ee0289675edbd585fb1c00b7eb2e5f0 | Triage

Analysis

max time kernel
135s
max time network
138s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
18/08/2024, 02:32

Sharing

Report Analysis Logs

General

Target

Fn Free/Kainite-Free.exe
Size

289KB
MD5

158870748f905d1e064987e48bdf0631
SHA1

0813789b92f57e09e4f09c38fd18ddab1bc7f616
SHA256

4e8887a9bd782fb154259edcb4ab148b5f5506ee99c7ac54050f01baa7d6246d
SHA512

8d51cb77b9304ac817751fbd7f65a96ff6471eae813f2e2b4542ce5a929dfe9c68277011f7fa5c0963ee2f62e2bdc45dcfb3ff53316c12131b4649b2380a4a84
SSDEEP

6144:ApWlUhOqdIXrES2Y/WIZAu3mOJpwmMtPpnJc:ApWlnZzNOWLmOJp6pnW

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4192	Kainite-Free.exe
4192	Kainite-Free.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4192	Kainite-Free.exe

C:\Users\Admin\AppData\Local\Temp\Fn Free\Kainite-Free.exe
"C:\Users\Admin\AppData\Local\Temp\Fn Free\Kainite-Free.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:4192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads