7daef886ec175256b5959b0558c712ebe8e4268f18f5269d34335ac5c459cfc7

General

Target
Kainite Free.zip
Size 317KB
Sample260702-rfa77scy5q
SHA256 7daef886ec175256b5959b0558c712ebe8e4268f18f5269d34335ac5c459cfc7
MD5 281a8893aec5fa4d345e9096514abc42
SHA1 bbbbbdcc94d43f8118f987fa31c12255c074e7fe
SHA512 7590069619ef317e016c8855d7bf8fe43fdd004312722866e3d463fdc2a9aec809d1fdc8a99026aef826fd1e61f3f3a8706ca0029dd2360027949af869b650ea
SSDEEP 6144:nV9rpdgbthiUWx1OmQiK/mwUkxiTR0wruCID6WM9F2oDGPNtc5KOceLToR6VYG:bLgbth1Wfeb/3iWwyCZypv8XK6VYG
TLSH
T1776423500460189BCB7DB3F940150E2D8F6AEC3725FBF549BA1B8DC2AD7A1E7D2A850D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Kainite Free.zip
- Size 317KB
- SHA256 7daef886ec175256b5959b0558c712ebe8e4268f18f5269d34335ac5c459cfc7
- MD5 281a8893aec5fa4d345e9096514abc42
- SHA1 bbbbbdcc94d43f8118f987fa31c12255c074e7fe
- SHA512 7590069619ef317e016c8855d7bf8fe43fdd004312722866e3d463fdc2a9aec809d1fdc8a99026aef826fd1e61f3f3a8706ca0029dd2360027949af869b650ea
- SSDEEP 6144:nV9rpdgbthiUWx1OmQiK/mwUkxiTR0wruCID6WM9F2oDGPNtc5KOceLToR6VYG:bLgbth1Wfeb/3iWwyCZypv8XK6VYG
- TLSH
  T1776423500460189BCB7DB3F940150E2D8F6AEC3725FBF549BA1B8DC2AD7A1E7D2A850D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Kainite Cheat.exe
- Size 480KB
- SHA256 8cc7afe346c13a95357551d9075afda369ff1b81bbdcb312c0cccd1ae897cb6d
- MD5 c92b26b6edb44a18bdbe24ede45248b2
- SHA1 5e15b691f1d6afe00e4285ab37415697cf238469
- SHA512 75de8cf774bd7c167156788c7dd2360797a46f9ae5d3384b7eab47551207a5072b28db6a57f336b105f53af30689921b25aface615418973a37d80940118afa3
- SSDEEP 6144:DZT1TJCvwaXWpRBI/7NmJ5QFfjAnUy3exivgjjhCfnAIQ4+ZOkmRuYmnafU209gn:DRbECS/C5QFSUy3kivgHA/AKUIijnc
- TLSH
  T137A4AF81F1E846F8D07B6139959ABA0FEA393444072049D723F495783FE33E6A7B7612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

persistence adware ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  driver.sys
- Size 14KB
- SHA256 d81062724c9b66c14303b68eff38d86fdfdcbc7bda3774f66126ef45ca99d317
- MD5 c0cedf7d8f7fac6140b79ad05f2fa77b
- SHA1 6e81926517ae444b93090f59ba43ab0c91c50c7c
- SHA512 2b2ffb9a1cb14a16d855ab01db98f2359328f7a4c94b691dd9dc3ab5ebbf7c8ad6fa2ad3f7e90416fb8b4a71b930c691ec870d5ddea12af5b8aae37d808cf0b1
- SSDEEP 192:xL7/02NUwN5ZjOoOjpyGsKEbhM84hugNp047YcHKNm02TC:l42NVN/jOoOMNVC84h/Npb75cmXTC
- TLSH
  T114626B92A24550EAF33AD5FE8072162AE3B6F01113179ADF04B4C92C2F13AD45E3DA51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  mapper.exe
- Size 150KB
- SHA256 147ed184ad10de228555bb14fb95ec7a11e99a4d8ca9c1ffcce144f4da97bbc8
- MD5 6cfdd01a1d3e84dd6d048ff226ed5fe8
- SHA1 9a9d6091d8118e00da130a79f205e6a0fedbed88
- SHA512 ee3d3b6473888310b0d854014d59c2c888f1eb404df6055a4a041b28f6942e35891d7ed858c9be196d683889678912913c3685f007e4f14ced3a27724d643ea1
- SSDEEP 3072:WoRUjZEY7IDfVETlwkwUmJTQSaMm5/6oaXh4NqO+w:fUZEY7qfol5cWlTr+
- TLSH
  T112E32A1797A5106EE1B7D6B9CAB24911EB727C550B74D2CF135048BA0F32BD0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6 behavioral7