General
- Target kuai_win_cid_268141.exe
- Size 111.7MB
- Sample260802-gmd8bstxgz
- SHA256 baee286188360fed313813e5644b6964017a1de7321b0992cc50e4a989e2b451
- MD5 5d388e0fd7066c4cf8be6d80d3dcc795
- SHA1 5e1b91c6f69f95eba8c829671cd715aea0522cb7
- SHA512 ee6ba633096b13150ad361c5c63690d17d59ff4e9254780c7d2e55ff5f3c70cc68ae4b4690333ec97fdd88aedc8373291d7d8e3f94ea41b21b67025c312080cd
- SSDEEP 3145728:K2P14H8+leRiEQMjbJ5JUZDaUbRTHHXhs4lE8Q90kYbC:K294H8Ee9jbzfuczVYu
- TLSH T173483337F285027DE02A183164BBE310793FD6A42C468E4A85EC38AC9F766713D7A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
kuai_win_cid_268141.exe
Resource
win10v2004-20260513-en
19 signatures
300 seconds
Behavioral task
behavioral2
Sample
kuai_win_cid_268141.exe
Resource
win11ltsc2024-20260709-en
19 signatures
300 seconds
Malware Config
Targets
-
- Target kuai_win_cid_268141.exe
- Size 111.7MB
- SHA256 baee286188360fed313813e5644b6964017a1de7321b0992cc50e4a989e2b451
- MD5 5d388e0fd7066c4cf8be6d80d3dcc795
- SHA1 5e1b91c6f69f95eba8c829671cd715aea0522cb7
- SHA512 ee6ba633096b13150ad361c5c63690d17d59ff4e9254780c7d2e55ff5f3c70cc68ae4b4690333ec97fdd88aedc8373291d7d8e3f94ea41b21b67025c312080cd
- SSDEEP 3145728:K2P14H8+leRiEQMjbJ5JUZDaUbRTHHXhs4lE8Q90kYbC:K294H8Ee9jbzfuczVYu
- TLSH T173483337F285027DE02A183164BBE310793FD6A42C468E4A85EC38AC9F766713D7A757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates new service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
File and Directory Permissions Modification
1Hide Artifacts
2Hidden Files and Directories
2