04b75587b30ea8340658a9be75c45af99bbe8e0129b341fb25a60190387fa2cf

Sharing

Copy URL Twitter E-mail

General

Target
KikoFlu-windows_350.zip
Size 23.0MB
Sample260810-c63mtadf82
SHA256 04b75587b30ea8340658a9be75c45af99bbe8e0129b341fb25a60190387fa2cf
MD5 e6abbadffea01183c16d466389f80ac6
SHA1 2f98d378b6dffe31b5278ac3b87044481d1228a9
SHA512 6faf04a301ff371d9fb286007c4da4c9343df1271845571a9c7d7454bdb6d9aa93f5ed6e4e24b784717f40a212326a6379d9aeeac682ebff1059ed50a891e7b5
SSDEEP 393216:nm3ASpYQJVCwFMqGfn222DReXOUZp8t/cM+JbLMXhjtyI8UMivlSRsGYyudl5ZDW:nmwvQJVLFM7e9ReXOYX/MXhjouhtWX02
TLSH
T1A23733CBF225A739D309A4B16408AE56E8F0C3B1E4F4487BEEE4A9E1614DD0591FCE71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  KikoFlu.exe
- Size 321KB
- SHA256 885ead95e4c52478b8feb3baf0be16d2d0598a4982d48a054a7ac7b52736bee0
- MD5 d484e7e5aff8ce72c23f2573061dbe40
- SHA1 36c0540f86c57780116086aa5240fa046eb46d6c
- SHA512 7b2137328cb61b8178f5b2c364e5b8b5c115ebb49d7035722c5adb49a67529faeaddf97b48452fbe463f56bc269e865703db920382b4985641aa1db139e0a43f
- SSDEEP 6144:boPHLVFM6pYqQiToia5Ej0rwj0UeCe7L+6rURqwnQAw6cjm3tzXzruW1oOQ2mOR7:0xFM6pYqQiTonOj0rwj0UeCe7L+6rURt
- TLSH
  T1EB648116AD3550BAD1854A3CCCC28981CF637C851B9D4DCBA760FA9A1AF1590FE3B23D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  connectivity_plus_plugin.dll
- Size 97KB
- SHA256 802a186ad18238d28a48baca69f05d4ae768f30282e508585dc24a465ac49214
- MD5 7a20f69538b5e2614283a1d238369b12
- SHA1 9161ca4825eee1c5385c84d1a0196aecb4d054b7
- SHA512 72d0c8659c900852d42fd62188a0ce84eba27a5cf05f9d44f2df098ac45f568d1ac21a1a3bb7bbeba74f58ff2b007e72395d03e558273ce14916ad6efa0797b8
- SSDEEP 1536:pa76Jsrjk26J0h7xS+ddNBq7k2S5vgChy40b7l:Uusrd6izdzBq7ZS5vgChy5Pl
- TLSH
  T1CAA32A3BEA1940ABD21AC47CCE578945DB72B8964791A7CF17900ADB0F27FE80E3D611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  data/app.so
- Size 15.9MB
- SHA256 679ee536d34e4f2f2a16191cc0e0e2dd78a83fbf69a77de408011c48675506e8
- MD5 f0b2080e91ad0c386c89f8c5718bb5fa
- SHA1 11fe55793733725d7d6cdfd2e962cbeeb2837818
- SHA512 80823e9d64f7d71f8923768a67cc2aa287059b924b05013232ee6610683af1573a4c34a0349a7f43b04bbc5c78d1a66f878a08c91ca6f5d4a87ad4f9360223fe
- SSDEEP 196608:WmA3iXM9JCFGfXwbuuCZIWv/k+lNoOW/iaWgHgY7RQE9nfyTDJVWo34FNdTWQAAU:WmIuRCyzDoTzWqYZ8Ad2SSMb7
- TLSH
  T17CF60B87C0A48361F063F737B75F3EA96E1479EC4A74664A0BD54A252E87CE0468E337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  data/flutter_assets/assets/icons/app_icon.svg
- Size 2KB
- SHA256 ff7e23d5d13970fb3a1c685ca8b22f459202291095f21b371ca7d4b055059e98
- MD5 bd1d8a45edf3cdf33fe7551045f238a1
- SHA1 e0e26db2d2e181c3b20f52dbe5c5c6b6639be09b
- SHA512 2096142487cdc10eb6654ed66a3af9c6e8dda1241e80c10b7d29819fd7e26ac0f97a6700e81912b1ed229476961adf17c8e0241ca6ea87ba73635dd3d403a8bf
- TLSH
  T15351FF6CD88488B2CBDC07C455F9FDC58ABEF32F11C238565A9E26811D4DF2A62AF304
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral6 behavioral7
- Target
  data/flutter_assets/packages/media_kit/assets/web/hls1.4.10.js
- Size 365KB
- SHA256 30b278794fd3f269a47e6dc7b76ae9a04f08acffdd72f9b8cc26d49d3ba09c38
- MD5 bd60e2701c42b6bf2c339dcf5d495865
- SHA1 f231909c5f807a555f84cb196b19a4ebe4f44734
- SHA512 abc2ca79601657bfc5c89e2b849392199fa1b315100473f8c500aea05999ee3e5ae6ce8e77d03c0d3ac4f9a8348d19f9ec74c1315579efc17ac1052b24c76abe
- SSDEEP 6144:nBz8/19dbqpG0xMqPqjBeja18a6vm255qJxFm20wp9mHqP:nid+G0xM0qMjoF69qJxFmu
- TLSH
  T1AF842BED76A5602642C2B1A5903F5207633B7D0A3409C1ACFA2BE9D75DB894DB03BF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8 behavioral9
- Target
  desktop_multi_window_plugin.dll
- Size 132KB
- SHA256 fc46d35fc1103d3218abaec57b9fc04115810e99718017e05aaf77fb61d2058e
- MD5 8bbb6669461416c71f3d0a13ba5c1f7f
- SHA1 13870f4f0e6c69fd32ffe4886d7bbcc36dba41ff
- SHA512 c99169ebab9956aad2eecd9f18685ef990be2e4899b5ab055ac2197eebffb38d1a1378f8f0bb9b809438256230eb76057297d2a06254d15f8b56422a76e3cb57
- SSDEEP 3072:PVIIyl02nCC1H6eaCJLWRnQRhEVP9DgdPc/Kk1RGXZMg:dI0gf1H6x+yRAPdPc/Kk1RGXX
- TLSH
  T167D34C2BB61D40BBD16AC1BDCA934903DB7278C547A197CF1B900B9B0F67AE44E3E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  dynamic_color_plugin.dll
- Size 81KB
- SHA256 2a5e12a0b171dcb4f0f7599d872db7aefdeb2e3e20b4054b8655c99b6492d69c
- MD5 3a7d9ef745983fe2d5ee826f9b7effec
- SHA1 99b651b05023c4efc0b30976aa5ef56f762e23d2
- SHA512 d6d29ff8530d7136e7fc189a0a5b096bd893dc4b53ac3d72c23693106caf5438aa1e781357dfb5161f27a72bf6e7f9366d093bdd88b878e609cbec7bda4dab3f
- SSDEEP 1536:fmaGg/U6h8xDn1bcxAss5rM11MclalNlD:O7T6qr1WAss5rM11Mccln
- TLSH
  T1DE832A2BEA1D50ABD259C878CA534905DF72B8964BD1A7CF57500ADA0F27FE80F3E211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  flutter_windows.dll
- Size 20.3MB
- SHA256 011e87e890b7bfbac89f63c763341ffb8393d2b4a617dd836c471a0cdaa1346f
- MD5 ae8508a20a3c598ae3668aeb39633755
- SHA1 1052c38074e8836da5becf616cbd147775e9400f
- SHA512 61781fad83efc462ae5dbb616e1b0a2a30e6f35fdb63926913c1c0172f8302f9c39f4e8c2bf1a9a18c0cdab1199eae03c5a4a683248a3e180cce07245643453c
- SSDEEP 98304:FE7hoeyV+kw1ULtPbwDggwZr3hH5epehPTuwTlckSTKZSx8tkvMzVdD+cWUN25el:F3IgBfefQzH7wpuIFybvI9YA4V
- TLSH
  T132276C03E29640EDC059E179971BAA27F670B8490B20BADF3B5C47253F66BE01B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  libmpv-2.dll
- Size 14.8MB
- SHA256 0a5a0b476866c91a639a4e511e8153968f8fa23564461b0aa09acdba816164a4
- MD5 4eda7466f01800ef8a35ea6587a2fa96
- SHA1 6ea4f01569226f5c7cf70963920088c3e3e804c0
- SHA512 1f7f2a05ae67a37efd56aeb5d14368985b831b34a6817f1ff9cbdab4964271240ea17aef855f761de4bbd5a7fb553183a8c164ebe75259e0143363a26e5b0a24
- SSDEEP 196608:/Js6zoW8p6Xk9pR/IKVVLpxOeZyT69VvAsy:/m6J4ptLLpxJD9Rby
- TLSH
  T133F68D07E29354ADC66BC130CB66D772A720BC1C02F56ABB3654F6F02E32E907B5A715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  media_kit_libs_windows_audio_plugin.dll
- Size 12KB
- SHA256 124dd0887e03654cc56a6cc0c6f6af17f5962c44c669de634d4661bd7d1ec332
- MD5 819ecbbe0749b92a4c51774e4467d35e
- SHA1 2f2e57963ffe4a9168a128c7324d2bdcccf9cdd9
- SHA512 12aae45b0ea4ed63dafa9828937f07dcb3e942d2b57fc7f30b1147468dc86079c3f83c65c956ee0e7511c842e4a10722cc1e8dec9e9b68438ce55dccee1ed865
- SSDEEP 192:Xe0nlt6FFhblNAR5gdzG2fgnXVYSAvX2TrWDty6yfYQgDJSjOOB:Xe0nT6Fr+EfgnZYW
- TLSH
  T1DD42E6867BA60DDAD66543B490630F08C376F938A722678F53E1D05A1FAB3C1786FA50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  permission_handler_windows_plugin.dll
- Size 117KB
- SHA256 5f38078251d70bdfbc8de90490bff0c11b73cd03b1027f5671e112d32feef47f
- MD5 8596175f597d38275f99d73b4e32ac07
- SHA1 e82d2dc4371bad893b356c627c4c204b2e95f8b6
- SHA512 5603e0ec9c9b64c69da4c7c5e503e4357b895636855483c5432a382cdafefade6bf3dabb49da28b8d398e855442b8fc83895db2e432873996977ae6bcf8eacee
- SSDEEP 3072:OFgUovNJe6KQ/MVRJZ4itPnp5vT43bFL0V:OFg/C6KUMLp5vT43bFL0V
- TLSH
  T1C7C32B2ABB6941A7D26AD57CCE834945CB72B88107A0A7CF17550B9B0F27BE45F3E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  screen_retriever_windows_plugin.dll
- Size 116KB
- SHA256 814cfc99246126afc09060b13edbe9e9291d6a36bfe03c3038df48cc4196190c
- MD5 4fe09778459dd2da9248ec1371792220
- SHA1 3bbeae203b39371038d6258ee633a00810590b44
- SHA512 21ecba26ff02d02b9a51b8f0b5fd9df72965a2dbe010146ebbf3e323e63f71b20e366b7b942a740b1fca139dac8ab17e0bb06f6a2ca53d03ecf0e99f2a0c4dc8
- SSDEEP 1536:osILOR6ScJJsKeRcz06Z7xS+kq3hhrSoqz1wKnp5AuZCGAHSHvD:oDOcOw063K4Goqvp5AuZCGAHs
- TLSH
  T144C33C2BF75940A7D26AC4B9C9438D46DB71B8914B91A7CF57900A9B0F27BE84F3E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  share_plus_plugin.dll
- Size 135KB
- SHA256 a407542eb0f4f7604aaaf40451aa8c052316546669bf9188004d3e956f75d19d
- MD5 d303470ae15fb315d385de68d3e68595
- SHA1 5666f6c4d65e6f67d3a90a0e97bd867d0e9f4e90
- SHA512 c041f59d3ba10888de09b8fd69c24c4f8e013cbb0fea2b31dbbc6013d59153e5896c1efa91a58dd4dea073f16fa093286887c898ae62576add4c9b4ef1099e9c
- SSDEEP 1536:nBuhvvdQuEnlA96qotrxmHe81gp1VPmhWjU5Fw4stQdhJa468onS/t/Je/E1LLTF:nwhX8e6qSp81g3VmwjU5Fw4st6Fb
- TLSH
  T15CD32A27BA1D40A7D13AD478CE47CA89D732B8924B918BCF3755079F4E677E84E3A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  smtc_windows.dll
- Size 269KB
- SHA256 2c53c3e263608c77b36f339f300e33e841bb4f55136eafe6575c49a6597a3ad2
- MD5 80dd0831463c829f1ca9c4649df0fc27
- SHA1 cc81a1c412a55dd3527ca84e70abd31ed5621d56
- SHA512 668135fd528baea7f7470ffd2adc9d5a0b559c53ecf66cbe75988321302288283ede4ea5c64937efd4d7592af141dadf7a7411a8f42a4dff66323682cf7b6910
- SSDEEP 3072:SbLy6XzdFf0o3aD4gOaf69N0ENlDxtaQYjflpTdReaCWqZ3NzEs+NJgN63yjP:4Ly+3f0t4pafqfPj4LPsgON63yL
- TLSH
  T19B443911BB852C68D45AC87482478A966EB174CB0F3AF5EF059542392F3BBF96F3C604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  url_launcher_windows_plugin.dll
- Size 96KB
- SHA256 277103216d0d54e64e40a8856a3a5eabcd6884070e1913040e748a7bf9c4c9e9
- MD5 3829923364616f6f6c1c398983d16b92
- SHA1 7735b83a6393392d419de7c94e43d6b36b1e52e3
- SHA512 ceaefa9e50e3cc2140f298486ef165bf5ded83850a7e923fd9fd92b08ec8795bcf9c87cc533e2ea041d250dca03f95721fd8ed0ae70f1e3a175d2526b9617cc1
- SSDEEP 1536:JGpZR9r942MfYxKj2866rzCoFB2Fit9LBwdIBBZ5rmV+ijjigb:Jkfr942MQ86nxyhBb5rmV+ijj
- TLSH
  T176A33A3BAB1D10ABD259D4BCCA534941DB72BC854791A7CF17A04ADB0F27BE44E3E602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  window_manager_plugin.dll
- Size 127KB
- SHA256 b587fd1b28b7c691b5e6ee6dc0397fad9972425a3d30eae95c4e8e5edb81ab77
- MD5 f83714ad3a3602b8fc29b92dfe72a605
- SHA1 19df59a0c3f88071f602cb051525f6ffc82558ec
- SHA512 b0f83ca894a9fc425a1ea0de8df76018243a716cf32ccf046e7e3130eaa966dc4d6fa7634a46248cf89d034c9cae7d72f15d7debc4655ca464ba9e9651cdc3a8
- SSDEEP 3072:XtkqlwiT2HH18kS/6XmNVBXj4obUcAYPAsygJTuKFWm:Xtkql9T2id6XmNVdAYPAsygJTuKFZ
- TLSH
  T1F2D35C1BF65900EBD26AC4B8CD939946DB71F8C64B52A7CF07500A9B4F23BE44E3E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30