General
- Target KimiK3-Desktop.exe
- Size 69.2MB
- Sample260815-zt81dstdld
- SHA256 be9cb31ff1434c8dd13ab72a3046b2c0383272f0c0a2bdf95c1e35045c8b1206
- MD5 dd99cac210dd56ad90279ac3fb7ad8b6
- SHA1 2fc58f7c6e84ae9968958371d5f3f20c3cc897bb
- SHA512 e5536bf140ecc46444773c8cbab2c9cd318bfe405c842bf15b3074ab2f418a87f13cefed585d69e878488390e0ca14113de4ba4593bc22d5487617784d806b30
- SSDEEP 1572864:xejOYfa8Qjo6duNjPt1a2C2Uh2Qr9xuTJdpdbdNSpzmnc7:x4mdduhF1a2Cfr9IRYpuc7
- TLSH T1F1F7337CF234B6AFE7C19B7FA40614EAD3499DA60596142EBD3F24D378304809A2D91F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KimiK3-Desktop.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target KimiK3-Desktop.exe
- Size 69.2MB
- SHA256 be9cb31ff1434c8dd13ab72a3046b2c0383272f0c0a2bdf95c1e35045c8b1206
- MD5 dd99cac210dd56ad90279ac3fb7ad8b6
- SHA1 2fc58f7c6e84ae9968958371d5f3f20c3cc897bb
- SHA512 e5536bf140ecc46444773c8cbab2c9cd318bfe405c842bf15b3074ab2f418a87f13cefed585d69e878488390e0ca14113de4ba4593bc22d5487617784d806b30
- SSDEEP 1572864:xejOYfa8Qjo6duNjPt1a2C2Uh2Qr9xuTJdpdbdNSpzmnc7:x4mdduhF1a2Cfr9IRYpuc7
- TLSH T1F1F7337CF234B6AFE7C19B7FA40614EAD3499DA60596142EBD3F24D378304809A2D91F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL