General
- Target 0891de9e99dd2ac953ed0943e330e130c45238a325ea8df530cf1532f956f9e9
- Size 14.8MB
- Sample260807-msswkataqa
- SHA256 0891de9e99dd2ac953ed0943e330e130c45238a325ea8df530cf1532f956f9e9
- MD5 3cda3f9765592d1776e7cb0739d57caf
- SHA1 6e4de76be3042c39975189510a184ffd91ced946
- SHA512 7a2b660ae6c249b2167a6071a56781aa0fc286b91fde73b9be7c5182937586c52c0ead5f74889508226d04f4a2ae5d0a113d0e9d315c4c757d047d7f6fd50496
- SSDEEP 393216:yZQoY4saE+gZY0ZIL35cRm+5Yn7StGIaEJEn9eEgpI6u8X:HopnJyVIIrPQIaEKWu18X
- TLSH T1D3F633C3D6954BBC1290ED6372C0546290FF2720F965BA0E423D19AA76ECD377CCB962
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExuiKrnln_Win32.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ExuiKrnln_Win32.dll
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Lorn-Mini-Tools V1.0.1.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Lorn-Mini-Tools V1.0.1.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target ExuiKrnln_Win32.lib
- Size 2.0MB
- SHA256 71a94d988aa4cdeb61ec290ef746dcd3a4e0d1788acac27f2e41b1671441ed38
- MD5 4a8a26bb63c69ab30c3ad638040461b4
- SHA1 797e65115e307ba83e00e8344b62e96af212288a
- SHA512 af278fdd42b3551e3de375822c671203838202774b1b9c6896cfd2be510c467ea12144c4e782b4a8e41f2b63ccd88415aa25841525a0160bb96620b4789f09eb
- SSDEEP 49152:eYe2bnq3xVwnqqAlWZyQY2KWEP8kjYQW2c4Nh9v0SbiRiNOL:emnAAneWsDESbiR
- TLSH T18EA5A061F7C285B2D8A733717566B37BB725B8414C2D86DFA3C43A0CE9B42604A87367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Lorn-Mini-Tools V1.0.1.exe
- Size 14.3MB
- SHA256 daa53cec28b5440e8d7c7a1d180d369ba66613ced33c9e9c60ae039c4e6650e1
- MD5 864eaa32a0ad5534f6d23f481c073aa4
- SHA1 908b3c497cddab80e846c6280700ac208ee49620
- SHA512 5e79ed6ef0ef26bd2885bfddeffad964de8cba427f1ed4e0fcf0a92009b918652f6f7ebaf33041d89f0e0df0749af72887447a7785dd67adb7fd3c8024b3e07d
- SSDEEP 393216:E/UE6aiHeyz758XQCNMx3SByekqJrcKcbMcTT:E/Jj6gXpUekqKbMc
- TLSH T189E633DF5ECB44EDD9C008B49F2F6AD333F323A48D814C3A59C57849B0A2F7A606A556
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger