Overview

overview

7

Static

static

3

crackme_lvl31337.exe

windows10-ltsc_2021-x64

6

kegn.exe

windows10-ltsc_2021-x64

7

kegn.pyc

windows10-ltsc_2021-x64

3

kegn.py

windows10-ltsc_2021-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    release.rar
  • Size 7.8MB
  • Sample260703-xkmppaew7v
  • SHA256 2284ecfe322562da4794a042f97c6c1d06b047209d6f34b13b0463ea797956a1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
persistencepyinstaller

Malware Config

Targets

    • Target
      crackme_lvl31337.exe
    • Size 136KB
    • SHA256 d8206b20ec3bc37e646c5979b0b7b8cb3f3747b78665066cdf6cb5ed745f5732
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    persistence

    • Drops desktop.ini file(s)

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1
    • Target
      kegn.exe
    • Size 7.9MB
    • SHA256 5a4fde249cebd1982056fee8d353072a5f74cce36e45bf11494fb8f7128f4cdf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    behavioral2
    • Target
      kegn.pyc
    • Size 4KB
    • SHA256 98089f6273657b712dc3ab619df0ce7dff0932d178f8b84a7090a7a9c9bcc678
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral3
    • Target
      kegn.py
    • Size 3KB
    • SHA256 f37181ed1fb07886de5f8bf662b3b800e88c9c6c042c543e74890279adc32c7b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral4

MITRE ATT&CK Enterprise v16

Tasks