84a964cfaa42fcc6a4cce85b60a96e29697bca0d781340ba923ddf2eb9e1f878 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

ka_ka_jie_tu.exe

windows10-2004-x64

7

ka_ka_jie_tu.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

clips/文�...��.svg

windows10-2004-x64

3

clips/文�...��.svg

windows11-ltsc_2024-x64

4

keymapservice.exe

windows10-2004-x64

3

keymapservice.exe

windows11-ltsc_2024-x64

3

screenshot.exe

windows10-2004-x64

3

screenshot.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
ka_ka_jie_tu.exe
Size 2.2MB
Sample260730-pp388sxgjd
SHA256 84a964cfaa42fcc6a4cce85b60a96e29697bca0d781340ba923ddf2eb9e1f878
MD5 4cfa42d7027d829a352c2d9ea4a8c08a
SHA1 89bc7a08fdd90abe074c088b97b2c5fa9e326900
SHA512 347bc7e5097fbab6e5df481f722c91790d7eb61383cdcb12cb4c06ee14bc217b40721685a428033045912cd7bb06272304861dc4d715e922e498467c6ab5cbed
SSDEEP 49152:EyiWQZAP3nARwzQ3T0yzW0lpSHOM/pFbr4OceZcJYa2tejS:EyiWD/5EIySfdRFv4OLiJYa20jS
TLSH
T1DAB53370B650ABEECAAA7973186709D3F2807C3955E25C0723CAB3772415522C93F7AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ka_ka_jie_tu.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

ka_ka_jie_tu.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

clips/文字/消息.svg

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

clips/文字/消息.svg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

keymapservice.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

keymapservice.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

screenshot.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

screenshot.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  ka_ka_jie_tu.exe
- Size 2.2MB
- SHA256 84a964cfaa42fcc6a4cce85b60a96e29697bca0d781340ba923ddf2eb9e1f878
- MD5 4cfa42d7027d829a352c2d9ea4a8c08a
- SHA1 89bc7a08fdd90abe074c088b97b2c5fa9e326900
- SHA512 347bc7e5097fbab6e5df481f722c91790d7eb61383cdcb12cb4c06ee14bc217b40721685a428033045912cd7bb06272304861dc4d715e922e498467c6ab5cbed
- SSDEEP 49152:EyiWQZAP3nARwzQ3T0yzW0lpSHOM/pFbr4OceZcJYa2tejS:EyiWD/5EIySfdRFv4OLiJYa20jS
- TLSH
  T1DAB53370B650ABEECAAA7973186709D3F2807C3955E25C0723CAB3772415522C93F7AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
- MD5 7854290f8bc473fb9fad1917b0065731
- SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
- SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
- SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH
  T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  clips/文字/消息.svg
- Size 1KB
- SHA256 fbd384183ee68f308e58d5221fab745622a1dcbeb55de05fd337fac5787642db
- MD5 8eac356ca1edf2037d6e8aff758857fa
- SHA1 4d7b996879f381009747c1aab1aa40ed4af2f53a
- SHA512 d0ced462937b163a1f8972bb9e87a56dcf801b6a5bc64fab4f7418d2491eedf8553e9059af0600ecccf4392b2e33cc0617f65cdb923df40dee1b8f511b8580b4
- TLSH
  T15711D548238C46766A19018CF73F74A2A07F91C7AE2C4A7674416C36FB11AAA102F3F1
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  keymapservice.exe
- Size 41KB
- SHA256 3fdef2e7b21cdb65d71f23d1a8ab73f91ef419194df5ae093a9fdd4879bc98cd
- MD5 544bc22c3ecbe84a406b83f95543dc5f
- SHA1 d64ebed8f1ea84938903c744dd0119da34f5fd73
- SHA512 15c8d7b876aa56bfb364a668b22ba68d10a677bd2ff0c5c884cdbc20565aa364a5958595ab40027632fbbf6df13cb046ba1b5573e387de1cfb079af76192b1ea
- SSDEEP 384:SuUlwO1NpvXwHsXqPk+bdv/JcfBHfU1yJBe/ZIKartSxbVtwnsdPQ4ReiH1:SuYwO1NV9+RQHfirBtVisZf1
- TLSH
  T19513B7CB77D5136ED8FA4F363427091207A2CF55872BC86D92E5B348C73A29B0249DA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  screenshot.exe
- Size 2.2MB
- SHA256 a37e688a478369e6edcb5fe08fbccd379de1c00f678d843e9d43848f45e22a68
- MD5 1a63ea50aa7ef78e70c63e7f15a89ae6
- SHA1 589ce3f00b3c7045e4d11cd911ee06d6dcf3a54f
- SHA512 17a8642491ed81a86473a8f2b1c0eab66d5ca1d02b15f7caf63424d160c461af535ed51791824b5669fdb5df9eb04b91ea87e426166f820205ee6321dc12a840
- SSDEEP 49152:L1E1W1APFJ69haDRMIVq6ZpK5IYDpzDVZ:d+6Icp9VzJZ
- TLSH
  T146B5F14777E547A6D6BF4BB864A3284046397F02F9BAEBBE244530DD0672B808C48777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

adwarediscoveryspyware

behavioral8

adwarediscoveryspyware

behavioral9

behavioral10

behavioral11

behavioral12

© 2018-2026

Terms | Privacy