kraken

Sharing

Copy URL Twitter E-mail

General

Target
4417150163a2637ecf0d024ed08a3d93d703ba583c976e069f03e0c6049bf206
Size 2.3MB
Sample250718-e3e4fsvnt3
SHA256 4417150163a2637ecf0d024ed08a3d93d703ba583c976e069f03e0c6049bf206
MD5 76eefedc91c49586efc59994ec989ec3
SHA1 b5f20081304e9b9d2279bcdb5857932b9224f5a9
SHA512 ab6e714f04cfecf35886cb93c58994a7273f5d9ca7674b9de4fc6b5e6d26900a3197818d7909497f2559dc5e09f21842f232bb1e97f1626ff651456806f31f49
SSDEEP 49152:GGWv3SJ7saH4hMC/WgJWkQSi3Pw73K7O3F3xLElESYvLL:1IuQaH4hhWg8Si3Pw767O3F3rLL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf.exe
- Size 549KB
- SHA256 7af238050b2750da760b2cf5053bcf58054bcf44e9af1617d8b7af3ed98d09c6
- MD5 86f01e9421980f5e30c7fe0e6a254d98
- SHA1 4d368e20a5876fc5aa865c8c266ceef2c9fe8c79
- SHA512 5590261284e55c09bb923a04832c99f35a3c40ad4f0c683cf388bf1db70a44341f53247c82718a8a9c55f12d767d9b2cc481a6cef5a94c5524ffb873eb32d1c7
- SSDEEP 6144:Nu0azWFoCQhibmR0q7Op6ia56q3maD+BcnF500n291R96IKS:80azWF8hiq76W6qT+Bcn29buS
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

kraken collection credential_access discovery keylogger stealer
- Detects Kraken family
- Kraken
  Kraken is a keylogger that is written in C#.
  keylogger kraken
- Kraken family
  kraken
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/chrome_elf.dll
- Size 1.3MB
- SHA256 13f451d72d1f7810aec40cfa00e7977bbd98ed455fbf9eb61fc25d7f46f46dce
- MD5 c375cf85b05c6597d6e4d398718f0a3f
- SHA1 ecac76d20e279f3e0539e8d20741c23fc78c1c70
- SHA512 6f814cc8d985dacd0c3adc13420c2ad520948e3f1f4ba5b944ef9d1f010e3c7360383f45f90ab1d61563a9575c12afb704b9b6787b4e641db69b5319856e3168
- SSDEEP 12288:j/f1F0MPSz0rARQtLCEcQLpYoo1dokv7ca7thH0j0cO24F7cP56Sg0eDyoBng:tSwrAQYEcwpYoo1dfvwEHLABdC+eng
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3
- Target
  Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/libcef.dll
- Size 3.6MB
- SHA256 bc3d5a532fd9f1a817883989997bce7c22c680ef5f4a8ff98cd604392a7b1fae
- MD5 d41c6245df841a5eca6b1e13b7cdace5
- SHA1 001df4ab11c23de7aaa386111ca99003436ed56b
- SHA512 93768eb508cc3800043c3fff6777a7c0b317a3326fa07596c065dbbbe2f7dbebaf5409dfdcd69f4609a5fe8f7ae13d79fca87eff9a4e2fe37f7ed97cf8f17202
- SSDEEP 49152:pOl6gRzm9XoycUKTkB+1F4KcgFC2SLwPWgQIl9:Wr11ZPWc
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

kraken collection credential_access discovery keylogger stealer
- Detects Kraken family
- Kraken
  Kraken is a keylogger that is written in C#.
  keylogger kraken
- Kraken family
  kraken
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral4 behavioral5
- Target
  Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/mscorlib.dll
- Size 83KB
- SHA256 54e177081447ced07441ae7c5318443263a403813f8a33ba39591d433cb70f0a
- MD5 48174776fee928196c0228afa4715139
- SHA1 9718eea43b2599c7203808482a175ed4f4aa48aa
- SHA512 d666c41da2746e0b6e3520616c1b602af0874f3a1dd26abf4016d182b48e48dff9c2729fed03035d0ca45c6c8c710697e2c68e035c5e0fbe931291536c1dc1e5
- SSDEEP 1536:h/G5jAA+2N62s8dqQUtFUuK9zS2DYyyN/Qv4odNCpMdVW83D9wylTiNULmuHkcL+:lWnLd6tF3XII/Qv1Lt/ZliNQ9D1IPp
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral6 behavioral7

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Email Collection

T1114

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects Kraken family

Kraken family

Unsecured Credentials: Credentials In Files

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

Detects Kraken family

Kraken

Kraken family

Unsecured Credentials: Credentials In Files

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7