General
- Target kahretsin_v3_32-bit_5f2b2.zip
- Size 65.2MB
- Sample260802-wp6spaydpf
- SHA256 6bd9c0638be982195f1ff06b34df05896c54fb53301e9d3acba3b063b63e2b87
Malware Config
Targets
-
- Target kahretsin_v3_32-bit_5f2b2.zip
- Size 65.2MB
- SHA256 6bd9c0638be982195f1ff06b34df05896c54fb53301e9d3acba3b063b63e2b87
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target KAHRETSIN v3 32-bit/KAHRETSİN.exe
- Size 635KB
- SHA256 09674dddd6993e20993d855647199106eaee6908f1840ecfbe4a44aaf91638e4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Assembly-CSharp.dll
- Size 148KB
- SHA256 3cb25a667cc3dc6824929915fd47f69b3f11333984488114f73087bc9b58c409
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/DiscordRPC.dll
- Size 82KB
- SHA256 8d3fbac1a27dec8fca75f564223e88dc87bf9cbe2fdd3c4b31562bef46fd7606
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Microsoft.Win32.Registry.dll
- Size 5KB
- SHA256 fed0cb1fa8edd2678c90b98408af0e1bb4ffae8c9e421a4ccc730f19823de0f8
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 576f911be2e0db795ea78f78828f3faf4b20900baf1ce8e33ca8fe599370fc1d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Newtonsoft.Json.dll
- Size 675KB
- SHA256 a56146202232958f46bd6a28b5a7da166aea123ee0d646735a46e5c341dfbf1f
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 2535fd6fac676852936cb435d917b2d69cc6fcdd391f7b3009898153ba04919f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 ec883b49c12ab0e5110337e817a72cf781878d7faf904aa8abb1ab1c4b99bd78
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Core.dll
- Size 1.1MB
- SHA256 f1b33eb1ae8522edcf9ba4c2b85f532d4bab68bfa2a51527264bb61619bed4ea
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Data.DataSetExtensions.dll
- Size 29KB
- SHA256 1c88d17e686caf77551a18d3672a1589143e6b8ae83bfcf7c306478cdb64ab90
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Data.dll
- Size 2.0MB
- SHA256 534ac87e6a7c1e3ce02ff2d88f4ffa45e7b5fc44e6236922c2f46f8174a29e56
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Drawing.dll
- Size 478KB
- SHA256 435cc673a1aba5af488d8af379d96f7e351a4b5ed2a1772892287a8268567deb
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.EnterpriseServices.dll
- Size 43KB
- SHA256 03f240d259b9cf27dbc5c9e8f42b8746a50cc5c52395d8e2de5730321f9de3b8
Score1/10 -
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.IO.Compression.FileSystem.dll
- Size 18KB
- SHA256 02f749fbe31e54cd8b86a35738e1dddae00ccc2e9fdb8990b93f1a494e6e753a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.IO.Compression.dll
- Size 112KB
- SHA256 15e84f38fb5e6bb926fe92a79374a083b8dfbabfa11f8cd1d409f21b98447cfd
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.