General
- Target Kane Loader.com
- Size 34.8MB
- Sample260712-ebtsjacx4q
- SHA256 cfd84355012f8e81c197a79ac9fe78809232ce408690eeceb7382f5c5bb21cfa
- MD5 525bc407effb1a3e4d287560325c9728
- SHA1 cc97099ac6ccc3e7d6b2b1e8e0880f4db5a79a63
- SHA512 84416a47d1723e2cc1363317c3877debea37437af435bea1311ad7926d5f4b7d9b53d082691728c1371f902ec071b3075a33fc434cd5639d176b58ca1dce9211
- SSDEEP 786432:MRI5ddXh51Uo5aWuayUow1dr2qNbQFQ/6enY:oI5nXZa/ay8zrWFQ/6enY
- TLSH T1558733075A999778C0C20B0865DF07DA61D0A5BEC4FD5E1D2ECBBC023661E9B448EEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kane Loader.exe
Resource
win11-20260513-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target Kane Loader.com
- Size 34.8MB
- SHA256 cfd84355012f8e81c197a79ac9fe78809232ce408690eeceb7382f5c5bb21cfa
- MD5 525bc407effb1a3e4d287560325c9728
- SHA1 cc97099ac6ccc3e7d6b2b1e8e0880f4db5a79a63
- SHA512 84416a47d1723e2cc1363317c3877debea37437af435bea1311ad7926d5f4b7d9b53d082691728c1371f902ec071b3075a33fc434cd5639d176b58ca1dce9211
- SSDEEP 786432:MRI5ddXh51Uo5aWuayUow1dr2qNbQFQ/6enY:oI5nXZa/ay8zrWFQ/6enY
- TLSH T1558733075A999778C0C20B0865DF07DA61D0A5BEC4FD5E1D2ECBBC023661E9B448EEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Deletes NTFS Change Journal
The USN change journal is a persistent log of all changes made to local files used by Windows Server systems.
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger