General
- Target kilo.exe
- Size 143.2MB
- Sample260713-wtlnbaft8s
- SHA256 a7ca24b692a76bd71ec10947e5f3e3793dc05d9a50f413e40ab480b526e8b08f
- MD5 2a71b2b0fb323f722482251b7bcfc11e
- SHA1 1a147c7ededb49f3c6769fa182bd117169705b04
- SHA512 84563a1e62f7384d484f8126c7f812758ddf0c437380751e9e2dbf0098b35f7310cf2d6e8f2959bb555ad7f41ab3a619cece25e376049506b338e54370238549
- SSDEEP 1572864:AZa7hmguP2nG0/Vyv7UhgxIabc/d7AwbUPguDKQ:AZa7hmguP2nUOzAwbU4tQ
- TLSH T1FB68AE43F2E76098E2FBD17095E64323E6327C44472455FF62988B722F36AE09776B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kilo.exe
Resource
win10v2004-20260513-en
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
kilo.exe
Resource
win11ltsc2024-20260710-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target kilo.exe
- Size 143.2MB
- SHA256 a7ca24b692a76bd71ec10947e5f3e3793dc05d9a50f413e40ab480b526e8b08f
- MD5 2a71b2b0fb323f722482251b7bcfc11e
- SHA1 1a147c7ededb49f3c6769fa182bd117169705b04
- SHA512 84563a1e62f7384d484f8126c7f812758ddf0c437380751e9e2dbf0098b35f7310cf2d6e8f2959bb555ad7f41ab3a619cece25e376049506b338e54370238549
- SSDEEP 1572864:AZa7hmguP2nG0/Vyv7UhgxIabc/d7AwbUPguDKQ:AZa7hmguP2nUOzAwbU4tQ
- TLSH T1FB68AE43F2E76098E2FBD17095E64323E6327C44472455FF62988B722F36AE09776B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL