General
- Target Kiddions Menu.exe
- Size 11.9MB
- Sample260705-vwglpsev2s
- SHA256 b1dc4fc92e47dac11d29bd780401d48029c1ee2042f95e1ae559520fbfc44e9f
- MD5 517bc0bfe4449b89e345112346b3eee6
- SHA1 93f2a61d7fa9b9a2c18516a0e2ce01ad68cb8d20
- SHA512 9179bc04928ba2ec10f7176e57d4d3f93f14644b069a5cabd76ace1bd31cce65450fabd82c4e5650d3deab4196ea8354650517614c83f07125b621197596a0b5
- SSDEEP 196608:puoCnWourHmtND9BKG+5fc2S/ErXKEtw+SJo7c+JfPB4sV6RMsqvSHnLwyrE+0n5:pu0ouCvDvV+53SM8+9fPBESDqHEWE1O
- TLSH T17FC633946E31C6FBFAB6A13DD515DD2C922CAFB27649C29306A831B518375F8803DDE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Kiddions Menu.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kiddions Menu.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
app.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
app.pyc
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Kiddions Menu.exe
- Size 11.9MB
- SHA256 b1dc4fc92e47dac11d29bd780401d48029c1ee2042f95e1ae559520fbfc44e9f
- MD5 517bc0bfe4449b89e345112346b3eee6
- SHA1 93f2a61d7fa9b9a2c18516a0e2ce01ad68cb8d20
- SHA512 9179bc04928ba2ec10f7176e57d4d3f93f14644b069a5cabd76ace1bd31cce65450fabd82c4e5650d3deab4196ea8354650517614c83f07125b621197596a0b5
- SSDEEP 196608:puoCnWourHmtND9BKG+5fc2S/ErXKEtw+SJo7c+JfPB4sV6RMsqvSHnLwyrE+0n5:pu0ouCvDvV+53SM8+9fPBESDqHEWE1O
- TLSH T17FC633946E31C6FBFAB6A13DD515DD2C922CAFB27649C29306A831B518375F8803DDE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
- Target app.pyc
- Size 1020B
- SHA256 5744c8ec8aca69b41401e8472930dd2e0e289f5cd99b69b96e6299dc571e146b
- MD5 486a543dd5f728efdd9a73b6d1ea1fac
- SHA1 da329fea4d637f5dbbb03ccf20e95593a11c33f1
- SHA512 0a62f1d5f0c4ed723142995debab519a6e889549b6bf24a19822b1ca8d082e9dc0056fe764e2c4bf357e5ec3957986db32ce9b2ce2f62184640af19d84e4a748
- TLSH T134117562E50014C6D2ACDBBA84FDAAA0955D7FF4F001D60A6B0EB0DA79D5231AFE1D08
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.