General
- Target kk.exe
- Size 11.2MB
- Sample260620-twprmsfz2l
- SHA256 062d525facad55b70e759da8c9bd925c07317da904ecb640e56b9ec8bf42560a
- MD5 2f9bd7542a7a88b3db17642d9d70d8ba
- SHA1 16c5afe3154a51be75571c196b0db7de5847e150
- SHA512 2f9e5d15352484eec6101fc4235041eb9ea5f2c2993e8afdc0525ca31d01bb9348d1b221137d19afb2fe1108b446a016bf60de35e07e4ba0150a16d4e9a6abd1
- SSDEEP 196608:AU0fStRQSIpIj9fZwQRCMIjhiTjRjMj7Id7XFiHZ+GUd23+Gr9MMW:NoStWSIWw8qlKjRLdLgHADd2vW
- TLSH T1FBC6335DA28412E6F4F3163AC927D614DB73BC610760C28F43E4AB6A3F331912D79B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
kk.exe
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
kk.exe
Resource
win11ltsc2024-20260617-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
viperitic.pyc
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
viperitic.pyc
Resource
win11ltsc2024-20260617-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target kk.exe
- Size 11.2MB
- SHA256 062d525facad55b70e759da8c9bd925c07317da904ecb640e56b9ec8bf42560a
- MD5 2f9bd7542a7a88b3db17642d9d70d8ba
- SHA1 16c5afe3154a51be75571c196b0db7de5847e150
- SHA512 2f9e5d15352484eec6101fc4235041eb9ea5f2c2993e8afdc0525ca31d01bb9348d1b221137d19afb2fe1108b446a016bf60de35e07e4ba0150a16d4e9a6abd1
- SSDEEP 196608:AU0fStRQSIpIj9fZwQRCMIjhiTjRjMj7Id7XFiHZ+GUd23+Gr9MMW:NoStWSIWw8qlKjRLdLgHADd2vW
- TLSH T1FBC6335DA28412E6F4F3163AC927D614DB73BC610760C28F43E4AB6A3F331912D79B66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
- Target viperitic.pyc
- Size 12KB
- SHA256 4ab28681965fcc471788b58cbc15e5cba5b777bd6b76eda2a6761a6050e3e18e
- MD5 ae0676cc339093a77473ec7f78ffea36
- SHA1 512475919e0810f1e149f69daa883694edfe3134
- SHA512 cfb1003fe969afb6ea562ce90e1d3645756e43ccc1ee18e3239901e03cc250ec5ca1fe2e2f5b816c56f13533294129226ed8d5a52aa889f6114f353544b14b6e
- SSDEEP 384:0nhlFATmpNDCYtdW9RWTzLPhJKshqNoQ9S:aVATmphCYzW9MvLPhsfPS
- TLSH T12942D13103C63526F31C6B7A568D5D00312B98990DB9722AD9CCD2F3E15E1E10E5BBA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1