342bd63c3b027c4b62fa7b80efcb94fe36ff9c57a259a022c7fbc9495a837b4f

General

Target
Kainite HWID Free Edition.zip
Size 71KB
Sample260707-lrg71aez5s
SHA256 342bd63c3b027c4b62fa7b80efcb94fe36ff9c57a259a022c7fbc9495a837b4f
MD5 f1032f1af2840a689f69eb0858011fd3
SHA1 3dd8236299af139960180ccb998d6b86e39fafca
SHA512 3a3edf1395782a3ec3f098eb698c955a5f96b8e6cd9c00b94aaa2246b1dd3b32237f618d8454658a25a8cfdc0ba595af824a84a35872d44a6c4c76b00fb6e5a1
SSDEEP 1536:7PBCHGpfdpNh0lagJCJ5ILnVrKMXaRjMWNKHIHji06hkKm+voR6VNei:7PSGp1NDgYbILVKOceLh1voR6VYi
TLSH
T1D46302100172559ECF8F63784940BB1D1FF28DA97290B389E50B89595E3EBFAFA0E14D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

persistence

Malware Config

Targets

- Target
  Run.bat
- Size 293B
- SHA256 393a9014292aa9fb22d7a989381095f40ae4a634e8fae3aa53adf5f2406c61c7
- MD5 b8e2ca5d011da939401bbabe305277cd
- SHA1 626c640843f6f2f166773df8c707f3bb771a5274
- SHA512 055901652713c4d2ffca89ef5c6b1433247ef0c385ff5343a4c41fb5775ff4949fd416e01d856265f16bfd2ed83e7cef1e23d4d620eb4efba48b035453ba90f6
- TLSH
  T15FE07207BCCB9AB20374DD9384301203F2418A8B280459EE31E04270BF29A62ABF069A
- MD5 SHA1 SHA512 TLSH
Score

8^/10

persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
- Drops file in System32 directory
behavioral1
- Target
  freetemp.sys
- Size 11KB
- SHA256 bf0f7f2593ac23cbd62be2b4cabbd93fcc9f570869fab2e654de76d57ff17767
- MD5 a510882348f7697e8c8e73416c687129
- SHA1 649aa73d6fc0fc9e2776ebc5601d5093dab018ec
- SHA512 31a788d25fa89b8a630ca938bc9e64c74a96365d9111a4206c682e9d21249b7e37e6a4d3797ef0c31edbff31e4d46eef937632be61aa13bcfe0e47538958363a
- SSDEEP 192:SK6ApA+eVip47M10BvWTEETDYPTQqXpMR5qOFcvlVstmlkYcX3oi7FrGPhY:SKFzEiY/XqR5DF0l6Mlk5fxR
- TLSH
  T101321946273204DBE228017EC1221D5FE279F5409772EBEF8BF6D6591723AD1213AB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  kdmapper_Release.exe
- Size 150KB
- SHA256 147ed184ad10de228555bb14fb95ec7a11e99a4d8ca9c1ffcce144f4da97bbc8
- MD5 6cfdd01a1d3e84dd6d048ff226ed5fe8
- SHA1 9a9d6091d8118e00da130a79f205e6a0fedbed88
- SHA512 ee3d3b6473888310b0d854014d59c2c888f1eb404df6055a4a041b28f6942e35891d7ed858c9be196d683889678912913c3685f007e4f14ced3a27724d643ea1
- SSDEEP 3072:WoRUjZEY7IDfVETlwkwUmJTQSaMm5/6oaXh4NqO+w:fUZEY7qfol5cWlTr+
- TLSH
  T112E32A1797A5106EE1B7D6B9CAB24911EB727C550B74D2CF135048BA0F32BD0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3