General
- Target Release.rar
- Size 1.9MB
- Sample260621-khtc8sds51
- SHA256 125f9600000f883294619553fe0c1e5c51ae1635972a6c71455e4b4347aeb62f
- MD5 6a0498dfabdf77a2cb92fe42d968a7ce
- SHA1 753a51c63b3a897addf07f8b153874861f543cb7
- SHA512 6807d6f423934049a8058df28e2620698772d469ac6d58111eded6bace35e769c02e51772449086cfc85026c80128e8901fd9bde4bbc72e86e97ca32d2ddbfb8
- SSDEEP 49152:HWXQpOoa85zkJqTH6/wAhVFQ6l0OoAfCsOC8CXYjS:kQgv8lTHEThVFQ6lGwTOC5r
- TLSH T183953308EBBEF655BDB8712728AF07462455AC23D5C643F6ACDD6F7A389DD0B8248031
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kdmapper_Release.exe
Resource
win10ltsc2021-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
nogibogi.exe
Resource
win10ltsc2021-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
rename.sys
Resource
win10ltsc2021-20260513-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target kdmapper_Release.exe
- Size 149KB
- SHA256 52c200991ccc78d19db603afa193fa37259a38b801b185759181fa497def728e
- MD5 db33c1e22af0289558d55dcf48b5a2e8
- SHA1 2576796f4158155fdb508d6d705754fe1250ea81
- SHA512 9bc0de9ad846f9f7b86db55d308d53dc6db3e4824396a3ca5fcb9df50bbc8cbef74e359d4c841b02940070b57a2b64aa56b29cd4240792b77547a0e881da30c4
- SSDEEP 3072:WyDruZr7MXuXxnDkVEVIkwPMmJTQSaMm5/6dQL3jd:a9YXaxDkuRiXWlqKd
- TLSH T154E32A5787A5106DE2B7D6B9CAB24911EB717C450B74E2CF135048BA0F627E0BE3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target nogibogi.exe
- Size 2.4MB
- SHA256 9eb2b30c943cc520f0fd24dd31d14e58a48a91a54d03cf17aed97b80f8beb335
- MD5 07f9d250227046c990dbc3691b6e8d79
- SHA1 4c33f18fa1942e948585bbd8ba92618c901cfdb8
- SHA512 ba7c1b5bfe2d8c3ec110758c3332b3950cc75fbf8ab2db4b8ef642fe7f60f79abec00d4159c7d3b867d26f3a01811f8056f6ebb3dbc19d1b76e33b957757e5d9
- SSDEEP 49152:NzqVcuxSpVsP2xaEJcOJ3d9AUgdPI/GoLd/HM8x7CFONn4Er:ZFu2xaacUviC/HL5HzC
- TLSH T1AEC5D0D2F3E84945E027B43857455D0FE2323428035186E7BF994A9E8BFE9E0CB7AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target rename.sys
- Size 25KB
- SHA256 35677b90f6e212bf3e953b7acf43b8f4696d940f2bc2713b75da228b8bef5fa8
- MD5 275ad0abae8300c4bcfeed9cf83e2b13
- SHA1 fbaac0ef36d27566554ec75102cba726a1e9b5d5
- SHA512 9217686b76b3e5f45608f15e0595dd8537b01dff991e288873211a051d980407ebd4782cafb7050a64b716f6c76bdd90bc7459fd369d0df230a01834f9bba597
- SSDEEP 384:wfhJqtCT9eOvwIM3hDeJDWsY/ouGQApg2xX/KA4IrNCWuAsuJVCMzwl0/g5rNocO:yMtCTnyxKC/oumxXyA4GCWu9eYSc6M2
- TLSH T117C22A2A6181A6FFFB67603A8373D2CFF9257041232698DF09B8DD1F234A9C52138D65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10