General
- Target kxrnagev1.exe
- Size 40.5MB
- Sample260519-tpjbaahs4y
- SHA256 29100b31c70b1ec45ff288fdd690517c4915c3d9cbc70b82d777383aab8152cc
- MD5 55856027c13cd2a582719e97d1e3cd26
- SHA1 4126cb18a3f3403a5c351b0427b09940771691eb
- SHA512 5a9d2b0345ccaf22352760cc2a3aee210ec9e18c08c157c534a2e1cc0f73c39dafdc88fa80713f4eaa8d3b18f602dd6f0727df09275d6ee41a5c0a674c76b974
- SSDEEP 786432:Chh5FItMm5R8yKQNRSLrIpLbh2vGSxjKtgtrXsrcr3tZq5otXh:ChFIMuRBKlLEpLbAvRxQyr8rcr3Dq5oT
- TLSH T15497338482D41693F46BF4BDB66BD44893AADC11CF61C8DF32621A2F1FB729954383B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
kxrnagev1.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
kxrnagev1.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target kxrnagev1.exe
- Size 40.5MB
- SHA256 29100b31c70b1ec45ff288fdd690517c4915c3d9cbc70b82d777383aab8152cc
- MD5 55856027c13cd2a582719e97d1e3cd26
- SHA1 4126cb18a3f3403a5c351b0427b09940771691eb
- SHA512 5a9d2b0345ccaf22352760cc2a3aee210ec9e18c08c157c534a2e1cc0f73c39dafdc88fa80713f4eaa8d3b18f602dd6f0727df09275d6ee41a5c0a674c76b974
- SSDEEP 786432:Chh5FItMm5R8yKQNRSLrIpLbh2vGSxjKtgtrXsrcr3tZq5otXh:ChFIMuRBKlLEpLbAvRxQyr8rcr3Dq5oT
- TLSH T15497338482D41693F46BF4BDB66BD44893AADC11CF61C8DF32621A2F1FB729954383B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Executes dropped EXE
-
Loads dropped DLL
-
Hide Artifacts: Hidden Files and Directories