General
- Target kentlauncher.exe
- Size 2.6MB
- Sample260714-kbld2sht5m
- SHA256 2e3e2d23c154630f8dc8c5bd69ed5e1410b9c8688a66a0197ed50082757cad76
- MD5 6a11530760957ed0edf7d0992e316457
- SHA1 53986bbdfec47767801f8c516b3551d72bbda340
- SHA512 f659124cb5d172812798a976ce3623f24c2328ce73a071adcc50327e4449330cb739edb4b04022d663aec00c6b384cf499d218e1582783695b8b495b74da4c40
- SSDEEP 49152:YgrX1tY/XGOKuXIYK/qck7ErxnG+iDXXFCMF4EHaYXJ0x:rxuXIzqy4VCc4EHrJ0x
- TLSH T17DC5C0D273EC4489E03775749A51190FE6727034072187DFBF950AAD8E7AAE0CB3AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kentlauncher.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
kentlauncher.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target kentlauncher.exe
- Size 2.6MB
- SHA256 2e3e2d23c154630f8dc8c5bd69ed5e1410b9c8688a66a0197ed50082757cad76
- MD5 6a11530760957ed0edf7d0992e316457
- SHA1 53986bbdfec47767801f8c516b3551d72bbda340
- SHA512 f659124cb5d172812798a976ce3623f24c2328ce73a071adcc50327e4449330cb739edb4b04022d663aec00c6b384cf499d218e1582783695b8b495b74da4c40
- SSDEEP 49152:YgrX1tY/XGOKuXIYK/qck7ErxnG+iDXXFCMF4EHaYXJ0x:rxuXIzqy4VCc4EHrJ0x
- TLSH T17DC5C0D273EC4489E03775749A51190FE6727034072187DFBF950AAD8E7AAE0CB3AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.
-
Suspicious use of NtSetInformationThreadHideFromDebugger