General
- Target Kainite Permanent Spoofer.exe
- Size 20.5MB
- Sample260807-t1np5sste1
- SHA256 656e7bc87e5f55328509488b64a17ecb2de9abbde18a97f9d3bcf2a8a609e2a9
- MD5 9696e66aa41e85f198183e46cb59ca61
- SHA1 e79910bdcf46cf0638cbfc953da31053dbfd1c8c
- SHA512 1a3b733ca13aa4fb5b3566cc682bdf93942fedebe07f13da0e0f7eb3e32f13bf153f0dafb6c28618a88379b2a70aa9ebb63bee982c4fb1e6ca21108adf1ab356
- SSDEEP 196608:b0NCtNRkfSNCt6Rk1aNCtURkuzNCtXRkL:bqCg4CTwCqBCE
- TLSH T1EF2749E88E5D49FC7711B638A65B629777F27F4E76A0DEFA2AC08CA3780F414B120154
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kainite Permanent Spoofer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Kainite Permanent Spoofer.exe
- Size 20.5MB
- SHA256 656e7bc87e5f55328509488b64a17ecb2de9abbde18a97f9d3bcf2a8a609e2a9
- MD5 9696e66aa41e85f198183e46cb59ca61
- SHA1 e79910bdcf46cf0638cbfc953da31053dbfd1c8c
- SHA512 1a3b733ca13aa4fb5b3566cc682bdf93942fedebe07f13da0e0f7eb3e32f13bf153f0dafb6c28618a88379b2a70aa9ebb63bee982c4fb1e6ca21108adf1ab356
- SSDEEP 196608:b0NCtNRkfSNCt6Rk1aNCtURkuzNCtXRkL:bqCg4CTwCqBCE
- TLSH T1EF2749E88E5D49FC7711B638A65B629777F27F4E76A0DEFA2AC08CA3780F414B120154
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.