General
- Target 2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
- Size 1.7MB
- Sample250727-kmdtcaxtft
- SHA256 2f9cf17acc4aae8aad11736bf90ddbc50d281d1c41d12a3d90e01d920d5a2494
- MD5 95ee1173a179af9230ac68e60f5466b7
- SHA1 28c835ceaaec3ba3de34ad7252f9ffbd343f1465
- SHA512 a906d03d185c1e469e795e3539764bbc0180ce20b52b2d17afa29cff00c0ac1bb14e4a5b233a973642077c41b23df9c0bf060cd1e3ef0038630d0bb3b078de99
- SSDEEP 49152:zDrPXfCbdj7QzbvsJUADG9pZTZ6vva2iOOc:zfCGbUBDGrf6vziA
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
PO Pintout copies - 4513366240-pdf/PO Pintout copies - 4513366240-pdf.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral2
Sample
PO Pintout copies - 4513366240-pdf/mscorlib.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral3
Sample
PO Pintout copies - 4513366240-pdf/mscorlib.dll
Resource
win11-20250619-en
Behavioral task
behavioral4
Sample
PO Pintout copies - 4513366240-pdf/msedge_elf.dll
Resource
win10v2004-20250502-en
Behavioral task
behavioral5
Sample
PO Pintout copies - 4513366240-pdf/msedge_elf.dll
Resource
win11-20250610-en
Malware Config
Targets
-
- Target PO Pintout copies - 4513366240-pdf/PO Pintout copies - 4513366240-pdf.exe
- Size 1.4MB
- SHA256 940f687b5c7cbbf8003032f14964e177af647c377f091e326fc558c8915abaf3
- MD5 d3a68cde0b1523e8d5690eef6067c572
- SHA1 d97ec8e3ffd7a8f18357253bde10ca74a062456f
- SHA512 dc80257d8d0ef098962958871fa53cc238d8ec31628ef33546518b5fe1df64a83b32ba338541e263462b205d31e3f9b70ecf59930241abe6ca682630f18e8eb7
- SSDEEP 24576:Zm9W0V3SbGWtBKyhXRFHi7GKN78Kmsaw+PTWO6OopguBR7JnDus:ZmMI3jWSaNi7GQfm3LrV6OorBR71us
- MD5 SHA1 SHA512 SSDEEP
-
Detects Kraken family
-
Kraken family
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-
- Target PO Pintout copies - 4513366240-pdf/mscorlib.dll
- Size 83KB
- SHA256 b1519b301139ea396ce4c837ceb6ed2bf344afa18dd9d15a77a60d6a620008d1
- MD5 d272eff8b88389b857a2789497fad994
- SHA1 013de53d3306dd1797a15f5ec750788d61ed275d
- SHA512 2a6e44d1b36fbfcfd47dee0e606dbfd6a64dbcfb55b09d0c1e57f23ee821e1287517742e346fab87158e3ea4c8232b1d7d8e534ea86527af80338d2398afb10d
- SSDEEP 1536:Kr+CFhZUOX5CFey4MR82H8KWldwjWBPZtoPMJ1dbJLHQuMBOYKUEa6kz0KwIP7W/:Krn/ZpCFp4+9jWFZtoPMJ1fLwuMoYZ6H
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target PO Pintout copies - 4513366240-pdf/msedge_elf.dll
- Size 2.1MB
- SHA256 9c1de5f2d652d1e07adc5d9e0156dd9474e9adc6f17d210285c6945df549667d
- MD5 bf71f128816f7a5033d70d72e3077538
- SHA1 53958e188c8c35aadbd79825d350be2d1c6d4e7e
- SHA512 7fa7ef1195738c9028e304f7422ee9e3d2674e3ebaa06ca31442032789205db16a8826eeaf2325025a05fb2b9c2fc5cf5cf93c81f17c91c3ebfee606fb4e7bd2
- SSDEEP 49152:Edl4CoKynlu+KAo0MDmrxI674h3uD/qULf7Rv/T1MwWJd5:yTqj1v/en
- MD5 SHA1 SHA512 SSDEEP
-
Detects Kraken family
-
Kraken family
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext