General
- Target kaze.exe
- Size 2.6MB
- Sample260804-wveamaeh63
- SHA256 e865ccdc55aad38dbbabad97e930951b379d8a51e31ed4163999876343f218b4
- MD5 9be51f221795ed8ff192a5eee1777f70
- SHA1 fcc97db904da560cbc8678a3c0ee949d4eca14f4
- SHA512 3fb39bb07787858174a87d8549d8349aa26dc959c32223b91d2f7e14e801d40dc839070ac166e6437633d843854ff125873c7330f61e872c403bd275b3314e11
- SSDEEP 49152:XEWLjP1tR+varaPQRN0CWG14fCot2vbExxOkan8AVqAKE52:XEWLbMCrLNxWGuFgEgka8KK62
- TLSH T14AD52369A38772DCD13784B40D9902EDB3B977A0CA835AEA1BC3B7316E531D57E16320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kaze.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
kaze.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target kaze.exe
- Size 2.6MB
- SHA256 e865ccdc55aad38dbbabad97e930951b379d8a51e31ed4163999876343f218b4
- MD5 9be51f221795ed8ff192a5eee1777f70
- SHA1 fcc97db904da560cbc8678a3c0ee949d4eca14f4
- SHA512 3fb39bb07787858174a87d8549d8349aa26dc959c32223b91d2f7e14e801d40dc839070ac166e6437633d843854ff125873c7330f61e872c403bd275b3314e11
- SSDEEP 49152:XEWLjP1tR+varaPQRN0CWG14fCot2vbExxOkan8AVqAKE52:XEWLbMCrLNxWGuFgEgka8KK62
- TLSH T14AD52369A38772DCD13784B40D9902EDB3B977A0CA835AEA1BC3B7316E531D57E16320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Boot or Logon Initialization Scripts
1Logon Script (Windows)
1Scheduled Task/Job
1Scheduled Task
1