General
- Target kairo_strafe_manager.exe
- Size 126.7MB
- Sample260821-d2ldeawtbs
- SHA256 a7110fed7430f3ea6bb7d5cd417ee2458a3a79801e0331acf6500b196bbba981
- MD5 e920a462634b7f39fdfb8171a8d4a881
- SHA1 8738e7299a6808fb3063100b6e0418381d93464e
- SHA512 695dd7317c4dd690a73d59d909ccda0f8d2bbbda7679754d607b5a7bf525c1b44abfa3d9943ab27264e76c18aebdc72a12892b4a750a72ec1d583cf1413400da
- SSDEEP 1572864:DOtfGnBuF1bNrqbU1bNrqbYD1bNrqb4n1s4EUAbEC1bNrqbMStw9Ow:DOtengXiIiMi46hRi6U
- TLSH T11858D047B3A50084E57BE139CA175503E7B2BC5503A097CB61A4FA692F73BE12E7E780
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kairo_strafe_manager.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
kairo_strafe_manager.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target kairo_strafe_manager.exe
- Size 126.7MB
- SHA256 a7110fed7430f3ea6bb7d5cd417ee2458a3a79801e0331acf6500b196bbba981
- MD5 e920a462634b7f39fdfb8171a8d4a881
- SHA1 8738e7299a6808fb3063100b6e0418381d93464e
- SHA512 695dd7317c4dd690a73d59d909ccda0f8d2bbbda7679754d607b5a7bf525c1b44abfa3d9943ab27264e76c18aebdc72a12892b4a750a72ec1d583cf1413400da
- SSDEEP 1572864:DOtfGnBuF1bNrqbU1bNrqbYD1bNrqb4n1s4EUAbEC1bNrqbMStw9Ow:DOtengXiIiMi46hRi6U
- TLSH T11858D047B3A50084E57BE139CA175503E7B2BC5503A097CB61A4FA692F73BE12E7E780
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.