Overview

overview

8

Static

static

3

DarkControls.dll

windows11-21h2-x64

1

DriverInterface.dll

windows11-21h2-x64

1

KsDumper11.exe

windows11-21h2-x64

8

Newtonsoft.Json.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    KsDumper11.v1.3.4.zip
  • Size 1.8MB
  • Sample260730-azz71awcke
  • SHA256 3d9c302a6cbcdc165b2bd6be776886b20a402c409f653ad3ee4ad4ccd6079c14
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Targets

    • Target
      DarkControls.dll
    • Size 60KB
    • SHA256 bb8ca65e6d9c3f4fd4d327a51c0ff8c58150a091e1243f273e95ef8830da7040
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1
    • Target
      DriverInterface.dll
    • Size 1.8MB
    • SHA256 ad13f37ea1519848aa9160a793345e2db303e855403c78644f6f60f0edbc83e1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2
    • Target
      KsDumper11.exe
    • Size 77KB
    • SHA256 8ded55af1ba89d1482be56d537e27d154fa8ff0a2e63be87489537988e8c8020
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasion

    • Modify Registry: Disable Windows Driver Blocklist

      Disable Windows Driver Blocklist via Registry.

      defense_evasion

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral3
    • Target
      Newtonsoft.Json.dll
    • Size 695KB
    • SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4

MITRE ATT&CK Enterprise v16

Tasks