General
- Target klr.exe
- Size 265KB
- Sample260622-g3f2vsas8w
- SHA256 4ee3511d715d4177f36658adab6e8c5114d3e129a5a7b96c99cc469effab8616
- MD5 47eb3099e6aea06f22c6037f7f1df663
- SHA1 f821ca00c914443374f39704d157fccdeaf87775
- SHA512 b9cbb86f59aad2f875e5cf04d8bbb153320d193b48e43d2a89d3bcc5772b6001a507812f84d752ca9e7648c6a1fa3e3203cafe51bdf4e7bc0953660db6d4b454
- SSDEEP 6144:lmpTEguy4gpjb/6l6ZaXyrWpAKhhvOjHJx:lmWP6bSlI2yrihhm
- TLSH T14E447C4763E525F9E0B78238C9A54B46E771F8221330ABDF07A0865E1F237D1AD39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
klr.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
klr.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target klr.exe
- Size 265KB
- SHA256 4ee3511d715d4177f36658adab6e8c5114d3e129a5a7b96c99cc469effab8616
- MD5 47eb3099e6aea06f22c6037f7f1df663
- SHA1 f821ca00c914443374f39704d157fccdeaf87775
- SHA512 b9cbb86f59aad2f875e5cf04d8bbb153320d193b48e43d2a89d3bcc5772b6001a507812f84d752ca9e7648c6a1fa3e3203cafe51bdf4e7bc0953660db6d4b454
- SSDEEP 6144:lmpTEguy4gpjb/6l6ZaXyrWpAKhhvOjHJx:lmWP6bSlI2yrihhm
- TLSH T14E447C4763E525F9E0B78238C9A54B46E771F8221330ABDF07A0865E1F237D1AD39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1