General
- Target KernsYearth.exe
- Size 785KB
- Sample260717-asc4wsb14y
- SHA256 989f348aa3a9cb5dd89787605a8b7c8fe46bed165025fd72ee33f454b8432b6f
- MD5 9365beec351e165de873550201685f91
- SHA1 2ee9a075a3c4be74b32099ffa1dec2dcf7fe4172
- SHA512 7c63ec656328236e9b3f312b73186adf82e79d08bfec6a4fa6dcd5c2dc52265abaa365039a1f8a22c57be830fb523cfc8560d0cf017d5721f18969e954699d74
- SSDEEP 12288:WyKzLUVqpWI6/UUIaYoenR4O9L9IA33eP4DErg2EfRwYeALErx6Kq5iMSuMgTtTg:QzLUVcQrx2/da3V
- TLSH T1DB057D49C54B9DF0F6024832B39A86AF7F12713C8F1CC94EE5FB1546C6E2D90964A1EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KernsYearth.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
KernsYearth.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target KernsYearth.exe
- Size 785KB
- SHA256 989f348aa3a9cb5dd89787605a8b7c8fe46bed165025fd72ee33f454b8432b6f
- MD5 9365beec351e165de873550201685f91
- SHA1 2ee9a075a3c4be74b32099ffa1dec2dcf7fe4172
- SHA512 7c63ec656328236e9b3f312b73186adf82e79d08bfec6a4fa6dcd5c2dc52265abaa365039a1f8a22c57be830fb523cfc8560d0cf017d5721f18969e954699d74
- SSDEEP 12288:WyKzLUVqpWI6/UUIaYoenR4O9L9IA33eP4DErg2EfRwYeALErx6Kq5iMSuMgTtTg:QzLUVcQrx2/da3V
- TLSH T1DB057D49C54B9DF0F6024832B39A86AF7F12713C8F1CC94EE5FB1546C6E2D90964A1EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger