543e76e2618cd7367e24d294b0d3ffa3c450125cc64315ebc4628242b74b8d0d

General

Target
Release.zip
Size 153KB
Sample260727-agkdtsshpg
SHA256 543e76e2618cd7367e24d294b0d3ffa3c450125cc64315ebc4628242b74b8d0d
MD5 73338a8d6594dfaefec446186026df1f
SHA1 c9ad2c5e7555a922a6765b0dc3f8e913c730b861
SHA512 58b3701d7f3445f3aba2d3600251ab1a038cfd751f377796080eca4d5ba449509f7da309dcd08f06adbccbde009ed4dac596a2103833456a161bfad88145e518
SSDEEP 3072:jj62BDE5NrcrajXeGt+V0B5Uif3omjDlcMQnEag/YbBms3YMGpp:vLhGUOXeG0m3oUZcMQnEB/YbBmAYMw
TLSH
T1AEF3124EC6659612C112B71C0A794DE87398CB4D67DA4843E3166236FE739EA2EE0713
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution persistence

Malware Config

Targets

- Target
  eacKiller.sys
- Size 16KB
- SHA256 c0e3b764106b47fb52ce039bc9eb4b1a9d5674ba419bcab819c63498180286b7
- MD5 9b100ccc0ad992211f89db0ddb89c089
- SHA1 b27b48166b4b9677ab895ec90f395702c6b51291
- SHA512 2178cf8ea57eac03d3513ba86927a0e839a79d382afc2dc71ee22c0d5039ca92ea6ca76ec857fda57f78958be762fbad26a083d901219a412777aa2be961d40b
- SSDEEP 384:+7BF6RqqtXdx700s5DP30pwuTR156b5Nhhnd:+7BeqqtNx7qgpwuVehhnd
- TLSH
  T1DD723B9B635124E8D2BAEA7984579727E8F2781403335BDF8334C06D2B37BD1B635A81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
behavioral1
- Target
  kdmapper.exe
- Size 150KB
- SHA256 879ecb614d9a8b7d41fe7d7b6a2c42a93b151161be6ceca24f61addb38da2973
- MD5 76f397d6e9153633fdf3fa7bbb9b7c65
- SHA1 3f9da91b5f4b88f6d46a9ec4791acca4c763b829
- SHA512 0e2c863e2c52ae79e223fbab24a7b732709bb713f1328204556cbe83c32748067bec5f759f8f0b3bd9a6d73ecd98d8ef0abc209966d0872dfd5b137f25da50b6
- SSDEEP 3072:pNgVrsyfheksDQFqOMkwZmJTQSaMm5/6yPLCQ:M++hedQ/VFWllDC
- TLSH
  T128E32A179BA51029E1B7D6B9CAB20911EB717C550B74E6CF135048BA0E72BD0BE3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3
- Target
  test_unhook.exe
- Size 151KB
- SHA256 9eca97ce6f4289126a278c751b0370f599d2d113fda94dbb21e92636a71af022
- MD5 e3a83583c05c1a56abd70010503808a4
- SHA1 63750983a1c1196407ea2afefdec5634a559f52b
- SHA512 0b3deedf3deb0bbb0d9553292539c4d0a0b75ea0f23b2f0f2505d5f6d4a707605f40f7fb79897c809a184ef35ff7eec061767817a6c2ab4a138e88c20a055793
- SSDEEP 3072:6H5Y/FPvC4iliCGapSBERbq0Q84kpkbdY2Fa:6O/pvC4iliCGaoN0XUQ
- TLSH
  T12EE35B5BB3A230F9E1A78278C9950946F772783207609BEF43A446753F236D09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5