822c6a22d7e371504fd78da3eaf00363c4ac2c982a695706b65cb8246c02fc11

General

Target
KRNL.zip
Size 2.1MB
Sample260720-vetvpsav51
SHA256 822c6a22d7e371504fd78da3eaf00363c4ac2c982a695706b65cb8246c02fc11
MD5 19255a6517c650486c0a8e06610bc848
SHA1 2f8364d9c014337c6089afecedfc0460c23ed765
SHA512 7717fa2f8705498cf0908587046405c8320a77e51bbb2a89d981bda3d2418053f8bec0b23c430fb5801fd45bbcd32f823bb46d726ada30a83ebaaed3b61a7a02
SSDEEP 49152:7Gn4aJTmtpQbJ5Ue5td+/nE7nebdM316oFvDgKC6sC85:Cn4SqC59+UH3xHS
TLSH
T148A53359C35C13FAF421B53EC4FD457F48AF65CA061F111858AA2A239532B19AE4BBC3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  KRNL/Krnlss.exe
- Size 2.1MB
- SHA256 acc312bb7364cd85e8664e06444e2153854c34bea9d059fa386249eac2d04205
- MD5 ff054ffb391b7e7ff996f7c183db6685
- SHA1 c473d3eb9350353fd49884f81661e87f92620547
- SHA512 fc98f8a4cb97dae637a7209f48f0b6381ee482458503b4ebad3fb823f2223c0b62dbdf280052d66e2330c8157436fa3fcf6846e03ba797aff2ba55ae846502f1
- SSDEEP 49152:/X0PyIJN0tbOnlHUWJtdU/jAZnCFParL6oFj1UKCCm:MPyuqgHBUU3rbV4
- TLSH
  T1E3A512B5F280D599DC05A739847BCCB60127B9BA9BBA014FB14E3FBA6F332815616143
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral1 behavioral2
- Target
  KRNL/bin/Editor/monaco.html
- Size 12KB
- SHA256 e8855e5ad01acc02d845fd20aae11c27ea254696c44c8c6edea189cabf33a524
- MD5 b2ea4686b594c7a38cc5cd190d196aad
- SHA1 b498554eeb0193653bcb87cf851092fa671dc257
- SHA512 84423c2788cef31a0ce4995147b9fd28aa27f52fbd5a50398c8916a622febb8656f5579bd33d0fade7a6d4c3ea600493a046c3885d23634a019b7b56158eb946
- SSDEEP 192:L1qcdOZJxxgcX/hOQmt0OGtiOMyYVxOYQcYRBcIKQU20Bg:L1EEe63dIRxlk6
- TLSH
  T1D342741B83411729D037227AEF6B9218EB2224576600435D7EDC97721F72A605EB1EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  KRNL/runtimes/win-x64/native/WebView2Loader.dll
- Size 156KB
- SHA256 ae69309c5e356350ea28d6b71a900bc43ee7e3f7a457d80a1f82efe6c419cc08
- MD5 7e36757d54d02eb93bfc13f8e81a79a1
- SHA1 48c5f26555d696ef0806d9d136dae28b5ea294de
- SHA512 a3fca3f610a652b63326d021ed1a8551d3fde7780371955a7232b239833e120de9046138f58df64fd07ef3a9c4762ed2d768640e1ee674ee2c0d143784c71386
- SSDEEP 3072:S8Jjy7/ph9euiDNQ6A93jJBC9JGv6TSMEtJ6mj4UrAmx:6/NVZ6A93j/QEtJnrb
- TLSH
  T19FF35C5BB2E500BBE17BC278C5A34A15E772B8111760AAEF036447791F13BD0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5