Resubmissions
01/07/2026, 00:12
260701-ahke8aax7l128/06/2026, 20:15
260628-y1srbad12r728/06/2026, 19:58
260628-yqbeaac14v628/06/2026, 19:45
260628-ygrd5sdw2l628/06/2026, 19:31
260628-x8wx9scw4x628/06/2026, 19:13
260628-xw7t1acz9k628/06/2026, 19:09
260628-xvag4sb18y828/06/2026, 19:01
260628-xphxasb12s8General
- Target kairu.rar
- Size 335KB
- Sample260628-ygrd5sdw2l
- SHA256 f568f696d20ab57e8703a8b8a2d191dffa58720c479ee512270b3d21753c3cc8
- MD5 9c6971448c2abd0784281a9de0929d11
- SHA1 aa415b48aa214a76175e48bc46827b8f221e1fe6
- SHA512 a030e414753fea5561e479a5ec22a7a58af793f7ca31828a8dcf12784666e127a6335a6c097f1799c12a36099c1c06e18a00708350160fe9c6f8f256cbd0d0a2
- SSDEEP 6144:9twn2UIdGixiGtTeC4bLGSgb7NllTWMC+LGDrscVArcQq3l72dbQTW93S:9e2mGtTe6z9z7CrArxq3l7qQT/
- TLSH T1FF7423C82F877CD55A7F2CD6D723CBA01438AE5F6A08F42EFDB7B101AB058A48059975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
kairu.rar
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
kairu.rar
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target kairu.rar
- Size 335KB
- SHA256 f568f696d20ab57e8703a8b8a2d191dffa58720c479ee512270b3d21753c3cc8
- MD5 9c6971448c2abd0784281a9de0929d11
- SHA1 aa415b48aa214a76175e48bc46827b8f221e1fe6
- SHA512 a030e414753fea5561e479a5ec22a7a58af793f7ca31828a8dcf12784666e127a6335a6c097f1799c12a36099c1c06e18a00708350160fe9c6f8f256cbd0d0a2
- SSDEEP 6144:9twn2UIdGixiGtTeC4bLGSgb7NllTWMC+LGDrscVArcQq3l72dbQTW93S:9e2mGtTe6z9z7CrArxq3l7qQT/
- TLSH T1FF7423C82F877CD55A7F2CD6D723CBA01438AE5F6A08F42EFDB7B101AB058A48059975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)