ecfaf650ba9fb4e9dcd53b6277da0738d04a8fbde352feddde7573364467a0da

General

Target
KyronX-Setup.exe
Size 15.5MB
Sample260716-czanfsey3y
SHA256 ecfaf650ba9fb4e9dcd53b6277da0738d04a8fbde352feddde7573364467a0da
MD5 26531d897876b2b14e86ea8d8fa532bb
SHA1 eb380347d8704ac58baff9197122f3bfeb08f096
SHA512 83ba102ecba3d18f3e7914cbfe0b68282a57b1bdee5ca6b686987f9a01467ac29027f8aba349256dd8739843ed9b08addf509ec862367228af7ac746343fa4e6
SSDEEP 393216:tvy+UqHFaS8ynPRG7MTVQbIjULWL+xNv9fHxx+FSrHED16:tq+UqHcSBi7cjRSn9fHxXm16
TLSH
T1C7F6331D3FC12263CB2C483514BD60BE19C7015C97DFD28B6B4F9A8A2A0BE469E4D76D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  KyronX-Setup.exe
- Size 15.5MB
- SHA256 ecfaf650ba9fb4e9dcd53b6277da0738d04a8fbde352feddde7573364467a0da
- MD5 26531d897876b2b14e86ea8d8fa532bb
- SHA1 eb380347d8704ac58baff9197122f3bfeb08f096
- SHA512 83ba102ecba3d18f3e7914cbfe0b68282a57b1bdee5ca6b686987f9a01467ac29027f8aba349256dd8739843ed9b08addf509ec862367228af7ac746343fa4e6
- SSDEEP 393216:tvy+UqHFaS8ynPRG7MTVQbIjULWL+xNv9fHxx+FSrHED16:tq+UqHcSBi7cjRSn9fHxXm16
- TLSH
  T1C7F6331D3FC12263CB2C483514BD60BE19C7015C97DFD28B6B4F9A8A2A0BE469E4D76D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  Xeno.dll
- Size 2.3MB
- SHA256 7125b2f8f8753ad2770fec80ef0372a4954282ab1b9011460b9eee62715da6a9
- MD5 b63a7182f3a2ed888e84507c7a63e2c7
- SHA1 67100aebb8a86c4e95280d9833a7dcca6769875b
- SHA512 adfa28e90568e9519201bdc7f4e3d84a8b090702201806c3d85a490385aff743d7959711a3a4265301e6ea956d112d4ecf41ddfbf292f31fcc5edc61ae95d0f7
- SSDEEP 49152:PIMHwQLHRlQWH8ra1/dtOyv37wVVpmZZuqrJ17/Mh:Pqz0/ZT6
- TLSH
  T15DB59F17A6A901ECD076D1F88A5B5513E7B17C4903206BEB02E0B5752F27AF68F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ui.exe
- Size 19.4MB
- SHA256 ccf21a194ab4491c7291271bfcec3a7900d645f19781226c300cf74bbe2a2471
- MD5 c6a50fe33f294edede5f594fa038529f
- SHA1 8a2bf912293d598b982fb4392672369f14a7a00f
- SHA512 924124c50a81bbe2efdaf8c6e3fbdbe06a1c4beed94103a6fc197a461879f398903fa30397494db482ddb5b78d843408374ffc147d88fb8f2ed736a365b63244
- SSDEEP 196608:4zLuErfPrqIZ7BhmnLn9b/95m55/IT2/2zFKlCn+7PrHN8qwLm2T2aDzU:jErfJ9BgnLnd3mP/IDzG6+7jt8H2aD
- TLSH
  T16E177C217A5B995CD05BC475834B8A760A7030DB0B39B9FF5494963C2F6EBF42F2821E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral5 behavioral6