Overview

overview

7

Static

static

3

kedadecode...up.exe

windows10-2004-x64

7

kedadecode...up.exe

windows11-ltsc_2024-x64

7

kedadecode...27.exe

windows10-2004-x64

3

kedadecode...27.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    kedadecoder.zip
  • Size 2.8MB
  • Sample260824-ag6basbf36
  • SHA256 d1a7dda0997f2cda0f449f1c40fa852fc5ce3b50d7443e63e4c00b6aae3ea6a3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Targets

    • Target
      kedadecoder/kedadecodersetup.exe
    • Size 2.1MB
    • SHA256 bfcc8f71ddedb7f0b555a1492c8b1699c95aa892d69424595e07d5b3d4689783
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      kedadecoder/wm814127.exe
    • Size 859KB
    • SHA256 80c60613602386929cc88566ae18f7ef5e477594f5ce00d2f6330eb035992048
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks