Overview

overview

10

Static

static

7

TOMUDA BYP...AR.rar

windows7-x64

8

TOMUDA BYP...AR.rar

windows10-2004-x64

3

BYPASS BBB.exe

windows7-x64

7

BYPASS BBB.exe

windows10-2004-x64

7

active key.exe

windows7-x64

7

active key.exe

windows10-2004-x64

10

ejlalsjdlajldkada.exe

windows7-x64

7

ejlalsjdlajldkada.exe

windows10-2004-x64

7

koreathebest.sys

windows10-2004-x64

1

test.json

windows7-x64

3

test.json

windows10-2004-x64

3

test2.txt

windows7-x64

1

test2.txt

windows10-2004-x64

1

test3.txt

windows7-x64

1

test3.txt

windows10-2004-x64

1

tomuda.exe

windows7-x64

7

tomuda.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    92s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/09/2024, 23:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    koreathebest.sys

  • Size

    7KB

  • MD5

    8859f2c6df283f30699bc980acd921e9

  • SHA1

    82293d509dc4b9f20f06329ba1a25c2827f6fa20

  • SHA256

    4f458fcefd0e8a46142a3a1c1cb45fa2f645e13598362c472ee4dd4fdeab82ea

  • SHA512

    05318c0828b6e5717bc6faa2baee5cc9e77459b538a7aabd7a510419d01e5baed2bc66f8a9c8e6682baa127d94e1aefc069aa73295b3f1e760f57dc432073edc

  • SSDEEP

    96:RCpLgQ14uJIs/v5X56rgFHr5EYva2GoADvw1eQzqXGHNlgr5tLJR:MpLP14uJIs/BbF3vLGieQzBlgr

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\koreathebest.sys
    1⤵
      PID:3008
      • C:\Users\Admin\AppData\Local\Temp\koreathebest.sys
        C:\Users\Admin\AppData\Local\Temp\koreathebest.sys
        2⤵
          PID:4400

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads