Overview

overview

6

Static

static

5

libiconv-2.dll

windows10-2004-x64

1

libiconv-2.dll

windows11-ltsc_2024-x64

1

libidn2-0.dll

windows10-2004-x64

1

libidn2-0.dll

windows11-ltsc_2024-x64

1

libintl-8.dll

windows10-2004-x64

1

libintl-8.dll

windows11-ltsc_2024-x64

1

libpsl-5.dll

windows10-2004-x64

1

libpsl-5.dll

windows11-ltsc_2024-x64

1

libunistring-5.dll

windows10-2004-x64

1

libunistring-5.dll

windows11-ltsc_2024-x64

1

msvcp140.dll

windows10-2004-x64

1

msvcp140.dll

windows11-ltsc_2024-x64

1

psl.exe

windows10-2004-x64

6

psl.exe

windows11-ltsc_2024-x64

6

ucrtbase.dll

windows10-2004-x64

1

vcruntime140.dll

windows10-2004-x64

1

vcruntime140.dll

windows11-ltsc_2024-x64

1

vcruntime140_1.dll

windows10-2004-x64

1

vcruntime140_1.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    kenwillzltd.zip
  • Size 4.3MB
  • Sample260814-ahnsms1eka
  • SHA256 582091c7d8c80523a43ef090719a00b7d26a13d963a24f6a2d7e15205a6dd704
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
persistence

Malware Config

Targets

    • Target
      libiconv-2.dll
    • Size 1.1MB
    • SHA256 2e5883a09cfc4391cb81db3f0da4d9b8cda21fc1b287e73a1624ad518d941b94
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      libidn2-0.dll
    • Size 251KB
    • SHA256 3ebaf0f048ad557c789c7602bbf0ff878b4e1c84b27fac559ad72c72259bd90e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      libintl-8.dll
    • Size 301KB
    • SHA256 a62094d6e21670f460cb110389d2cb7b9bc12cfbb075151eeb2c52436cc02755
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      libpsl-5.dll
    • Size 55.2MB
    • SHA256 d3346faf3462420c1abbee24a543e73cb14ec3f3b5bde2848dd4e5c36b18a799
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      libunistring-5.dll
    • Size 2.1MB
    • SHA256 35eae7305e2e108ec3eac677f3357e376247e77e32aaecbf818b2c68f134d91c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      msvcp140.dll
    • Size 540KB
    • SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      psl.exe
    • Size 64KB
    • SHA256 68e81ce966ca0c016bb638d0d29b106a0da7eab2ddf70438d8182fa89baf5d78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral13behavioral14
    • Target
      ucrtbase.dll
    • Size 1.3MB
    • SHA256 c2ed69b4a1bb9432c75134e813c70539e27c8c1fe96a784d9be78c874e93d9d5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15
    • Target
      vcruntime140.dll
    • Size 120KB
    • SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral16behavioral17
    • Target
      vcruntime140_1.dll
    • Size 46KB
    • SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral18behavioral19

MITRE ATT&CK Enterprise v16

Tasks