General
- Target Krypton-1.21.11.jar
- Size 6.9MB
- Sample260819-19b62axwev
- SHA256 8f9bacefa22327475476c00e00cf6ab8153707a16e9f65d5285b653a33be824d
- MD5 ae675ce43e53fe327cd05b8710eee890
- SHA1 91e5af96d33707bca981eb6048f03f6eedafbefc
- SHA512 5fe25b4004693eb37baf426015cd55c929a19eb755d0ccefa8400410df3d69de708e9d8ba911600ef4bea4fb940fbf8a8ebd8c0fad12e0c2d1023f78a16fc9c1
- SSDEEP 196608:sMRQDUQ/+QR16j5E0bcxd0WeNrx2ulUobZ:JQN2E0KPeUobZ
- TLSH T12A763334C16C2935C79FED32890B0F8B238981AF5610274B1B7251147A2FB91BBF8BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Krypton-1.21.11.jar
Resource
win10ltsc2021-20260513-en
31 signatures
900 seconds
Malware Config
Targets
-
- Target Krypton-1.21.11.jar
- Size 6.9MB
- SHA256 8f9bacefa22327475476c00e00cf6ab8153707a16e9f65d5285b653a33be824d
- MD5 ae675ce43e53fe327cd05b8710eee890
- SHA1 91e5af96d33707bca981eb6048f03f6eedafbefc
- SHA512 5fe25b4004693eb37baf426015cd55c929a19eb755d0ccefa8400410df3d69de708e9d8ba911600ef4bea4fb940fbf8a8ebd8c0fad12e0c2d1023f78a16fc9c1
- SSDEEP 196608:sMRQDUQ/+QR16j5E0bcxd0WeNrx2ulUobZ:JQN2E0KPeUobZ
- TLSH T12A763334C16C2935C79FED32890B0F8B238981AF5610274B1B7251147A2FB91BBF8BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Drops file in System32 directory