kraken

General

Target
75c029d76c3289b02ae36023911494d8f8e5ddd2d923303c8bca1e3c1e781194.zip
Size 2.2MB
Sample250717-espj5stpw4
SHA256 75c029d76c3289b02ae36023911494d8f8e5ddd2d923303c8bca1e3c1e781194
MD5 bf5e79371857630aa840cf18b77820d5
SHA1 6b432ffbf7ce9621edfce95c4c63a9a3159cc9f5
SHA512 c95fea5f88e9be0f0e3b9dd3628ef50716b41455bb9aee991eddbeb6eaa58d2168de63171a59d0487e7ae7445886208f8988ec75199750c3f734e87d1480904c
SSDEEP 49152:c9pZTZ6vva2iOOIuwkfoVqKqiY0gZF0/bR5Xx1:crf6vziUuDqqiY0u0/bRlz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  ArasÇelik Odeme swift-pdf/ArasÇelik Odeme swift-pdf.exe
- Size 1.4MB
- SHA256 940f687b5c7cbbf8003032f14964e177af647c377f091e326fc558c8915abaf3
- MD5 d3a68cde0b1523e8d5690eef6067c572
- SHA1 d97ec8e3ffd7a8f18357253bde10ca74a062456f
- SHA512 dc80257d8d0ef098962958871fa53cc238d8ec31628ef33546518b5fe1df64a83b32ba338541e263462b205d31e3f9b70ecf59930241abe6ca682630f18e8eb7
- SSDEEP 24576:Zm9W0V3SbGWtBKyhXRFHi7GKN78Kmsaw+PTWO6OopguBR7JnDus:ZmMI3jWSaNi7GQfm3LrV6OorBR71us
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

kraken collection credential_access discovery keylogger stealer
- Detects Kraken family
- Kraken
  Kraken is a keylogger that is written in C#.
  keylogger kraken
- Kraken family
  kraken
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1
- Target
  ArasÇelik Odeme swift-pdf/mscorlib.dll
- Size 83KB
- SHA256 7c9dacdd2c5e61e010b25cfae2b5f4a375073dca1f9eeb71105eeb212905c84b
- MD5 6bd99bde09df499eea99b3793f181565
- SHA1 2ea5d141a21e106ae2885637ebf33a9a1e5abe9c
- SHA512 ccd5c427c0dd74b33c3aa8c312fa831586df0bb4f0c195913ea03b4df899d005576a5f2045662461946c25d873e5c2532fe1a9e6105c7875bace0af840cd30d6
- SSDEEP 1536:uh/hlNCOy7lrM+XHFKiE1rJb8nHZnE1bizzsf4h7z8YbCnwZEX+ND:uhgh7NzXlKiEd6n5nEWzx1QYun+8oD
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral2 behavioral3
- Target
  ArasÇelik Odeme swift-pdf/msedge_elf.dll
- Size 3.6MB
- SHA256 aea0cb7e44a620b9903cb21f33c7a481d452e9f10a01f205c276d28013759a65
- MD5 f123bfaea100787b07d77652ab4f400b
- SHA1 edfa2a897cc4592cd74dd5cba68095acca94513f
- SHA512 74dad656ae2b38ee971ca4402306d53c078767598ede8229266d4be014f94e7e890d085847a8a4035c9183120650482bc2062fbce2a109a133ef6b06e4413a22
- SSDEEP 49152:6D4LrsG16QY5oe2w8PVGvTeYEgFAxnKaUQjH:rIrvC+a/b
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

kraken collection credential_access discovery keylogger stealer
- Detects Kraken family
- Kraken
  Kraken is a keylogger that is written in C#.
  keylogger kraken
- Kraken family
  kraken
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral4 behavioral5