4ada1086a23bb1d032f4cf1df42f1ff796a2868c0afa22d014cc02311a321036

General

Target
Kainite Free.rar
Size 263KB
Sample260724-d4enms1sew
SHA256 4ada1086a23bb1d032f4cf1df42f1ff796a2868c0afa22d014cc02311a321036
MD5 fc832e72769927f571d211163398de70
SHA1 25d3fb696442e018b2d886ad906576ae3614605d
SHA512 90afa374cf2e6f23fe9bc30d9d0c4c5e8e65570588446b06bd77cc23846ad0b8c257cf1d6c781e1dc2c774e83c4024af2b14e32253a06ba1066a88478fbc53e1
SSDEEP 6144:zTLpXpxGsFkPDmSKZrwl/64CXTj7Y6xu51x+k:zNpxboDDlpXKu51x+k
TLSH
T15F442389E2D19AC90B6C4975A05018C8EBFC38DD5D27EEC45F134764F2853D9FAB01A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution persistence

Malware Config

Targets

- Target
  Kainite Free/Kainite Cheat.exe
- Size 390KB
- SHA256 36994e3ed288baed8a32757c18e12e913d5b015b64fcd000c4ceeed65ed12949
- MD5 f120dc655ad2f60daced80f22e1de4ab
- SHA1 01a7bdfd63632cc9b8ce44eee8fc5b375ba076e1
- SHA512 7ba91a8d3257987a2cff20a7463c23c65592de05cf354e8b053cc1f292e83d7c9afd9a784362402833e073c400cd12c3e1b3a06a5d095848f99b4d22ca13e67b
- SSDEEP 12288:55ubz2BcEebBXwqb/imjDWOCAriFno+B:5MjEyBXwqrimnWqiFno+B
- TLSH
  T18E84AE81F1E444F8D05B613A95AAAA1FEA39385C172089D723FC45583FE33E1A7F6712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
behavioral1 behavioral2
- Target
  Kainite Free/driver.sys
- Size 16KB
- SHA256 1f6b0a45853a74971f2f0d077b93d7162861a041fb9556832b5094b740a1cd1c
- MD5 872eb4acbd4132a46eb85ab1626b3322
- SHA1 6e44328bc96a77abb9269dd9a4cf6bc502986be3
- SHA512 45fd2cb0b334097e7ce4b7e61e74d3f00fc308f6729dbd99d5f46d30ed2c45611e58d7aa81c1f17760ff7beadb5f208d12ca2100e85efafea0fadb944642e3e6
- SSDEEP 384:eqywPtuQ4W/yQqXNEhdzzwW5D79T5Ej6iMNm7:eqDcQ4Wsk5D5yj6iMo
- TLSH
  T1AC720925656748EAE7E1F8BDC5715272936AF519232425FF44E4C0A93E43AC8FF38441
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Kainite Free/kdmapper_Release.exe
- Size 150KB
- SHA256 147ed184ad10de228555bb14fb95ec7a11e99a4d8ca9c1ffcce144f4da97bbc8
- MD5 6cfdd01a1d3e84dd6d048ff226ed5fe8
- SHA1 9a9d6091d8118e00da130a79f205e6a0fedbed88
- SHA512 ee3d3b6473888310b0d854014d59c2c888f1eb404df6055a4a041b28f6942e35891d7ed858c9be196d683889678912913c3685f007e4f14ced3a27724d643ea1
- SSDEEP 3072:WoRUjZEY7IDfVETlwkwUmJTQSaMm5/6oaXh4NqO+w:fUZEY7qfol5cWlTr+
- TLSH
  T112E32A1797A5106EE1B7D6B9CAB24911EB727C550B74D2CF135048BA0F32BD0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5