Overview
overview
8Static
static
3Kivun_Term...up.exe
windows10-2004-x64
7Kivun_Term...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3KivunTerminal.exe
windows10-2004-x64
8KivunTerminal.exe
windows11-ltsc_2024-x64
8configure-...ine.js
windows10-2004-x64
3configure-...ine.js
windows11-ltsc_2024-x64
3folder-picker.hta
windows10-2004-x64
8folder-picker.hta
windows11-ltsc_2024-x64
8folder-picker.wsf
windows10-2004-x64
3folder-picker.wsf
windows11-ltsc_2024-x64
8kivun-clau...e-bidi
ubuntu-18.04-amd64
1kivun-clau...e-bidi
debian-9-armhf
1kivun-clau...e-bidi
debian-9-mips
kivun-clau...e-bidi
debian-9-mipsel
kivun-clau...eck.js
windows10-2004-x64
3kivun-clau...eck.js
windows11-ltsc_2024-x64
3kivun-clau...nal.js
windows10-2004-x64
3kivun-clau...nal.js
windows11-ltsc_2024-x64
3kivun-clau...tor.js
windows10-2004-x64
3kivun-clau...tor.js
windows11-ltsc_2024-x64
3kivun-clau...bin.js
windows10-2004-x64
3kivun-clau...bin.js
windows11-ltsc_2024-x64
3kivun-clau...tor.js
windows10-2004-x64
3kivun-clau...tor.js
windows11-ltsc_2024-x64
3kivun-clau...tor.js
windows10-2004-x64
3kivun-clau...tor.js
windows11-ltsc_2024-x64
3Analysis
- max time kernel
0s - platform
debian-9_armhf - resource
debian9-armhf-20260513-en - resource tags
arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem - submitted
02/07/2026, 02:11
Static task
static1
Behavioral task
behavioral1
Sample
Kivun_Terminal_Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Kivun_Terminal_Setup.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
KivunTerminal.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
KivunTerminal.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
configure-statusline.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
configure-statusline.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral13
Sample
folder-picker.hta
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
folder-picker.hta
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral15
Sample
folder-picker.wsf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
folder-picker.wsf
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral17
Sample
kivun-claude-bidi/bin/kivun-claude-bidi
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral18
Sample
kivun-claude-bidi/bin/kivun-claude-bidi
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
kivun-claude-bidi/bin/kivun-claude-bidi
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
kivun-claude-bidi/bin/kivun-claude-bidi
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral21
Sample
kivun-claude-bidi/lib/capability-check.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
kivun-claude-bidi/lib/capability-check.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral23
Sample
kivun-claude-bidi/lib/detect-terminal.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
kivun-claude-bidi/lib/detect-terminal.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral25
Sample
kivun-claude-bidi/lib/injector.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
kivun-claude-bidi/lib/injector.js
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral27
Sample
kivun-claude-bidi/lib/resolve-claude-bin.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
kivun-claude-bidi/lib/resolve-claude-bin.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral29
Sample
kivun-claude-bidi/lib/rtl-cost-optimizer/detector.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
kivun-claude-bidi/lib/rtl-cost-optimizer/detector.js
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral31
Sample
kivun-claude-bidi/lib/rtl-cost-optimizer/estimator.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
kivun-claude-bidi/lib/rtl-cost-optimizer/estimator.js
Resource
win11ltsc2024-20260629-en
General
- Target kivun-claude-bidi/bin/kivun-claude-bidi
- Size 1KB
- Sample260702-cmcmaaa141
- SHA256 cee184d0aea62a77f66eb2b8da7e45a874e23cb8776a4edf6438f6e1e637e762
- MD5 6bdd790f1323692f93786600234e8960
- SHA1 171fa42567dc94639f68a1f306aa5b0d00357baa
- SHA512 9fa349cb5ab790b6ae5d6c898de8b9c14ede5c789f93c822dc57b0d5b9bf114eabc0e98e3eb464f00f8946990bbdd8d85d3539800894001ffe2c1486753b3367
- TLSH T1353145419D0833361BB052BE670F9236EA7A90366321475174F9C3892B651EC4673AAF
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/tmp/kivun-claude-bidi/bin/kivun-claude-bidi/tmp/kivun-claude-bidi/bin/kivun-claude-bidi1⤵PID:673
-
/usr/local/sbin/node"node " /tmp/kivun-claude-bidi/bin/kivun-claude-bidi1⤵PID:673
-
/usr/local/bin/node"node " /tmp/kivun-claude-bidi/bin/kivun-claude-bidi1⤵PID:673
-
/usr/sbin/node"node " /tmp/kivun-claude-bidi/bin/kivun-claude-bidi1⤵PID:673
-
/usr/bin/node"node " /tmp/kivun-claude-bidi/bin/kivun-claude-bidi1⤵PID:673
-
/sbin/node"node " /tmp/kivun-claude-bidi/bin/kivun-claude-bidi1⤵PID:673
-
/bin/node"node " /tmp/kivun-claude-bidi/bin/kivun-claude-bidi1⤵PID:673