General

  • Target
    2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
  • Size 1.7MB
  • Sample250727-kmdtcaxtft
  • SHA256 2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      PO Pintout copies - 4513366240-pdf/PO Pintout copies - 4513366240-pdf.exe
    • Size 1.4MB
    • SHA256 940f687b5c7cbbf8003032f14964e177af647c377f091e326fc558c8915abaf3
    • MD5 SHA1 SHA512 SSDEEP
    • Detects Kraken family

    • Kraken

      Kraken is a keylogger that is written in C#.

    • Kraken family

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook profiles

    • Suspicious use of SetThreadContext

    • Target
      PO Pintout copies - 4513366240-pdf/mscorlib.dll
    • Size 83KB
    • SHA256 b1519b301139ea396ce4c837ceb6ed2bf344afa18dd9d15a77a60d6a620008d1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      PO Pintout copies - 4513366240-pdf/msedge_elf.dll
    • Size 2.1MB
    • SHA256 9c1de5f2d652d1e07adc5d9e0156dd9474e9adc6f17d210285c6945df549667d
    • MD5 SHA1 SHA512 SSDEEP
    • Detects Kraken family

    • Kraken

      Kraken is a keylogger that is written in C#.

    • Kraken family

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook profiles

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks