General
- Target KernelBaseInitalizer.exe
- Size 660KB
- Sample260528-3absbses3s
- SHA256 16c8e9383b07da5afcfd97ac25be4bc35e848c30185c15cf20c6bc364e98ac1e
- MD5 1f4cc6ef4472190a45ff4085fea1fb3d
- SHA1 64b5100c26fd8e99177f358b69b45321ae02849f
- SHA512 ffc018bae78e63dea1456260b5b87046fef51547c4e5ac3414b368370f137a4f4b93f70c242953c7b01b0490ea29f86fb7569db809b950b3957da7291134b105
- SSDEEP 12288:MTPMa5+ZwtgPC8sI8+vtuXFVyVi7Un2Cedym2jO+Aem8MhXU:MTUa50wSbsIrcVVAi4n3Mm
- TLSH T1CAE4AE45F1A444FCD06BA03A955BAE0FEA35384817204BDB33E49A752FE33E55BB6312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KernelBaseInitalizer.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
KernelBaseInitalizer.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target KernelBaseInitalizer.exe
- Size 660KB
- SHA256 16c8e9383b07da5afcfd97ac25be4bc35e848c30185c15cf20c6bc364e98ac1e
- MD5 1f4cc6ef4472190a45ff4085fea1fb3d
- SHA1 64b5100c26fd8e99177f358b69b45321ae02849f
- SHA512 ffc018bae78e63dea1456260b5b87046fef51547c4e5ac3414b368370f137a4f4b93f70c242953c7b01b0490ea29f86fb7569db809b950b3957da7291134b105
- SSDEEP 12288:MTPMa5+ZwtgPC8sI8+vtuXFVyVi7Un2Cedym2jO+Aem8MhXU:MTUa50wSbsIrcVVAi4n3Mm
- TLSH T1CAE4AE45F1A444FCD06BA03A955BAE0FEA35384817204BDB33E49A752FE33E55BB6312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Downloads MZ/PE file
Executes dropped EXE