Overview
overview
8Static
static
3kahretsin_...b2.zip
windows10-2004-x64
1kahretsin_...b2.zip
windows11-ltsc_2024-x64
8KAHRETSIN ...�N.exe
windows10-2004-x64
3KAHRETSIN ...�N.exe
windows11-ltsc_2024-x64
8KAHRETSIN ...rp.dll
windows10-2004-x64
1KAHRETSIN ...rp.dll
windows11-ltsc_2024-x64
8KAHRETSIN ...PC.dll
windows10-2004-x64
1KAHRETSIN ...PC.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...ry.dll
windows10-2004-x64
1KAHRETSIN ...ry.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...ty.dll
windows10-2004-x64
1KAHRETSIN ...ty.dll
windows11-ltsc_2024-x64
8KAHRETSIN ...on.dll
windows10-2004-x64
1KAHRETSIN ...on.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...on.dll
windows10-2004-x64
1KAHRETSIN ...on.dll
windows11-ltsc_2024-x64
8KAHRETSIN ...on.dll
windows10-2004-x64
1KAHRETSIN ...on.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...re.dll
windows10-2004-x64
1KAHRETSIN ...re.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...ns.dll
windows10-2004-x64
1KAHRETSIN ...ns.dll
windows11-ltsc_2024-x64
8KAHRETSIN ...ta.dll
windows10-2004-x64
1KAHRETSIN ...ta.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...ng.dll
windows10-2004-x64
1KAHRETSIN ...ng.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...es.dll
windows10-2004-x64
1KAHRETSIN ...es.dll
windows11-ltsc_2024-x64
1KAHRETSIN ...em.dll
windows10-2004-x64
1KAHRETSIN ...em.dll
windows11-ltsc_2024-x64
8KAHRETSIN ...on.dll
windows10-2004-x64
1KAHRETSIN ...on.dll
windows11-ltsc_2024-x64
8Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
900s - max time network
846s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 18:06
Static task
static1
Behavioral task
behavioral1
Sample
kahretsin_v3_32-bit_5f2b2.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
kahretsin_v3_32-bit_5f2b2.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
KAHRETSIN v3 32-bit/KAHRETSİN.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
KAHRETSIN v3 32-bit/KAHRETSİN.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Assembly-CSharp.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/DiscordRPC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/DiscordRPC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Microsoft.Win32.Registry.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Microsoft.Win32.Registry.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Mono.Security.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Mono.Security.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.ComponentModel.Composition.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.ComponentModel.Composition.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Configuration.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Configuration.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Data.DataSetExtensions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Data.DataSetExtensions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Data.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Data.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Drawing.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.Drawing.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.EnterpriseServices.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.EnterpriseServices.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.IO.Compression.FileSystem.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.IO.Compression.FileSystem.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.IO.Compression.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/System.IO.Compression.dll
Resource
win11ltsc2024-20260709-en
General
- Target KAHRETSIN v3 32-bit/KAHRETSİN_Data/Managed/Newtonsoft.Json.dll
- Size 675KB
- Sample260802-wp6spaydpf
- SHA256 a56146202232958f46bd6a28b5a7da166aea123ee0d646735a46e5c341dfbf1f
- MD5 d751086b7423fd5580b5e909b06217b9
- SHA1 c1707b17df636cd6d4a804361fc6ead4ef9db5cf
- SHA512 86655b59ad62664a35a30807cce7dc2c2be8f1ece235f35dc9031873d255dc6f13a22b55d0386becbe927f007a14a6d936ba3861d1103af8f2fe16aa0afebe11
- SSDEEP 12288:aBNYm5IWx4AhnIqjCfP4bYaRLL0eglBmjV+0kRqQCB0jEIF:aBum5I24A5LYa5g1ByNyq5B0jzF
- TLSH T119E4282063A89B26D1BF6735B4304D1547FAF807F2B5EB8FA604D5E92C977A08D107A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\KAHRETSIN v3 32-bit\KAHRETSİN_Data\Managed\Newtonsoft.Json.dll",#11⤵PID:4116
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5316
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4688