Overview
overview
3Static
static
301_CRACK/C...GE.ps1
windows10-2004-x64
301_CRACK/C...GE.ps1
windows11-ltsc_2024-x64
301_CRACK/e...ck.ps1
windows10-2004-x64
301_CRACK/e...ck.ps1
windows11-ltsc_2024-x64
301_CRACK/s...ver.py
windows10-2004-x64
301_CRACK/s...ver.py
windows11-ltsc_2024-x64
303_SOURCE_...kb.exe
windows10-2004-x64
03_SOURCE_...kb.exe
windows11-ltsc_2024-x64
05_HARNESS...mps.py
windows10-2004-x64
305_HARNESS...mps.py
windows11-ltsc_2024-x64
305_HARNESS/crack.py
windows10-2004-x64
305_HARNESS/crack.py
windows11-ltsc_2024-x64
305_HARNESS/crack2.py
windows10-2004-x64
305_HARNESS/crack2.py
windows11-ltsc_2024-x64
305_HARNESS...ook.py
windows10-2004-x64
305_HARNESS...ook.py
windows11-ltsc_2024-x64
305_HARNESS...ok2.py
windows10-2004-x64
305_HARNESS...ok2.py
windows11-ltsc_2024-x64
305_HARNESS...dll.py
windows10-2004-x64
305_HARNESS...dll.py
windows11-ltsc_2024-x64
305_HARNESS/deep_pe.py
windows10-2004-x64
305_HARNESS/deep_pe.py
windows11-ltsc_2024-x64
305_HARNESS/drive.py
windows10-2004-x64
305_HARNESS/drive.py
windows11-ltsc_2024-x64
305_HARNESS...mem.py
windows10-2004-x64
305_HARNESS...mem.py
windows11-ltsc_2024-x64
305_HARNESS...st.ps1
windows10-2004-x64
305_HARNESS...st.ps1
windows11-ltsc_2024-x64
305_HARNESS...all.py
windows10-2004-x64
305_HARNESS...all.py
windows11-ltsc_2024-x64
305_HARNESS...les.py
windows10-2004-x64
305_HARNESS...les.py
windows11-ltsc_2024-x64
3General
- Target klyra_EVERYTHING.zip
- Size 255.9MB
- Sample260826-am1yrsbc73
- SHA256 f9c58d52f826c7da4a859cfb13f3e90ca814f0dacd99c569dadec167b74afdc4
- MD5 1775517343edb3b996888ac719cd3f68
- SHA1 fb221c1ae3b3a81ef2181ee214a6df60869a5079
- SHA512 b59de2e59a0e2490ef675ac268346941966c6b2bdb555d8184eb469fac586b5db14edc1c04200224e05888126c0dd3186cdb70d9dee8831bbffbf600ff1c3f4f
- SSDEEP 6291456:OZTZ1Ms7+l7SwuAsb1Fr7W4+MH3jsWL/KRrptGVYolk0nQZZj:OZTTM5lQbfr7W41L+R19oTQZZj
- TLSH T172D833F190692F9A7D555D7683F26C2E9DD4ADCEE133B48F002983212F329B1B43C696
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
01_CRACK/CRACK_USAGE.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
01_CRACK/CRACK_USAGE.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
01_CRACK/elevated_crack.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
01_CRACK/elevated_crack.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
01_CRACK/stub_server.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
01_CRACK/stub_server.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
03_SOURCE_ARTIFACTS/klyra_pe_header_4kb.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
03_SOURCE_ARTIFACTS/klyra_pe_header_4kb.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
05_HARNESS/analyze_dumps.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
05_HARNESS/analyze_dumps.py
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
05_HARNESS/crack.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
05_HARNESS/crack.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
05_HARNESS/crack2.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
05_HARNESS/crack2.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
05_HARNESS/crack_hook.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
05_HARNESS/crack_hook.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
05_HARNESS/crack_hook2.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
05_HARNESS/crack_hook2.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
05_HARNESS/crack_ntdll.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
05_HARNESS/crack_ntdll.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
05_HARNESS/deep_pe.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
05_HARNESS/deep_pe.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
05_HARNESS/drive.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
05_HARNESS/drive.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
05_HARNESS/dump_mem.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
05_HARNESS/dump_mem.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
05_HARNESS/elev_test.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
05_HARNESS/elev_test.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
05_HARNESS/extract_all.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
05_HARNESS/extract_all.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
05_HARNESS/extract_deliverables.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
05_HARNESS/extract_deliverables.py
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 01_CRACK/CRACK_USAGE.md
- Size 2KB
- SHA256 84811b404eb9b0bdf8c586f8db6f9fb314a6e136fb69a3892bc6af27c4679550
- MD5 8472aaa0f3b9f72e5eec80f20ad97fc3
- SHA1 027b066e5bea7ab84ea33fd63741e791e268c7d7
- SHA512 1bbb48b2d8bc1a4942598539f0060e3da01ec456cd0b667137fb000f3f9d4f5cbf86dd18e0d18c3971c7f3d7ea2e5e1caa02696fd4b8bdf43e7f750306341338
- TLSH T18441B92AA71477B701F0C04739E576858F2B09AB422CE29432DE893C735562FB1F746C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 01_CRACK/elevated_crack.ps1
- Size 6KB
- SHA256 0458d36648d8f2dbb9fa15fe0c4a6c5c699196c9d9a428f7b7291612ab3f023a
- MD5 e12851f9d1f2e4239f8e7fd846247db7
- SHA1 49d48160c689da1951a238950b4293249ddfdd38
- SHA512 74a8233de1597dbc6f65e419f7d0c5f7e1784f8cd9eb1eccdb4ff4656608d6b045a2a34f7c3d325fc19e665bb8a79da92a2f64ee0e4ae159b36064e0effeab74
- SSDEEP 192:Nkeoef1dTBs+Fh+O1bSBWIacaMuJkw2BMSeQnfeSi+i4mlria:NlRZPR
- TLSH T1C7D1E610AF892EA680421037A6DB6365B67B40AB011F1F643DBDC5D57FFCB29DBE2114
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 01_CRACK/stub_server.py
- Size 3KB
- SHA256 1af046f2b3262b894589a1d655168bf4522fddb411a5cf5c4b1059ad53ebca71
- MD5 845f47b5528fa01abb524d566017b945
- SHA1 e4d75e11156b8a14c764b78afcccfa70f71ff04a
- SHA512 36d8e00b253067d7d6db2fd6c79d29eda40a0a62960c9148107ff99c67f90b29a2e9da02b4d8879579cf5b25298a32002ca43ca22bfb2d07e3fdd9884e486f5e
- TLSH T1E0817342CC251CF3D396C2A8186FF94423538853494B5038FABCD2CC6F586B9C0B62EE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 03_SOURCE_ARTIFACTS/klyra_pe_header_4kb.bin
- Size 4KB
- SHA256 c3a061a0f27e104501a41334f2c4a7d51ccc04a80f6cb1436480411d7cfc9a31
- MD5 cb509961e49ae874ef3eab7265789df9
- SHA1 9ebd3c2549d4af64a8d21aa878232533c4ec50e4
- SHA512 dbfa04a5f99957ed92ce856c52eeab9cf9802ea452df786156c543c1af3fef14914d488bffea6d193c7883e3199b704f8808840c082ceb1f7e58c65810205356
- TLSH T190815C76EB509CF2C05C0174018769453378387887E083161DC955772DC59D82C95B80
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target 05_HARNESS/analyze_dumps.py
- Size 4KB
- SHA256 c5c9d983f2714f0b786240dacc70d19e200e599cc0ffbb8e96ada49ff23bc021
- MD5 b51bebb0df5dba2b8342e2034ec9ec89
- SHA1 3bbbb5f49fa84daa3e23b69a994c12b6ec792064
- SHA512 4f894931f58f7a73d2ec07bdaec83aa1ab08761a1ea6a76baecfb3a8f0641cfe2b431b81ac43f87773bd4b82b3a12a843fa40b811983e1799a55e541ceba8f5c
- SSDEEP 96:3apaBcZySHQcRlwy9ZWaX0e1GDL9n+QbzZ+OHdwNfy7EP8NF:3CaWZ3jVWaEeIDL9+uZ+OHO0y8NF
- TLSH T1AEA10B03AD9D4860C3CE51ECDB4B86163716B9732D1575B8379D55F88F0B0BC46706AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/crack.py
- Size 9KB
- SHA256 e7abcd5eda3c040ed2c80deecc7d1ede69a9936f2aeec34064e0966861c074b5
- MD5 e56c8d315ef16cdf0b832669ee0c3551
- SHA1 f379ec4473d82c76a9d276af692f37440a701145
- SHA512 51a428dd02c134996f4d5f610212cbe5bee6814cb1be1b5af5b97d9b95a2899f393913c92d6e6ff72fbbd58b60edafcd3d6552e12559b2039e5a261c8bc6068f
- SSDEEP 192:CrrOXoE7kqEePyiVJ8wmHWefFUuyyT+bkN4TxFTCS5Bpgli:CNECcKrfFtTQk0xFTN
- TLSH T19F12C5429C1C5995D7830816B66297923B976503523A0D38B7FDC2B0BF1E0BCD1B5ABE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/crack2.py
- Size 7KB
- SHA256 bb753d714edd6cc5f3c6f15ed0440f059a9c588117b1a8c7a7fe3dbad57f644e
- MD5 045d6684e7a56b3525b940a739d3c57d
- SHA1 32a408107cbf2b669adeecb9a3719fd7a69e57af
- SHA512 b65ee28d2445a9af5215c8e990e07652d668561614138925dc93b1e74981e670a4b9ea36443d02bb053e8752abf74f9f2f49518b4773bf8780d6a83909b55be2
- SSDEEP 192:gQXvDokHcQUhIeeQx1H/2PT+g1T/wreGCkU2FGi:g+Dv85VxBUTH1TIqkh
- TLSH T111F1A4869D6C4891E7C30459F5225B823A926417913A0D6CF7FDD2B12F1E0BC91B53BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/crack_hook.py
- Size 13KB
- SHA256 9700bae7575c8d6e08e5270f561853190eae7b639e21e6106cd1fe52615ec2f6
- MD5 c80245f12ed4a20043ecd2462e138ece
- SHA1 8bfe8cf3ddd4cbcafb1d3ba574ab73776fe05104
- SHA512 980abd67ab6030aa95c4da24e65bdf43149cd739f34c90a55ded9ac1e1afb91d1e395478745f873f52a8a0684373b2ff7026f18bd7d003c288f725ad080fcf07
- SSDEEP 384:XSpIu/j4gxCi3ck4181UKm4+UcKmtuTx1T2skN:CpR4gxZ3c/81UKm4+Umqxh2RN
- TLSH T1A252E702582C58A4A3C30499EA529B937EB7A51B50760C387BEDC2B57F0C17C93B16FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/crack_hook2.py
- Size 12KB
- SHA256 84fcacc597098f09e6130f058545f563bbda370d939316fd82cdba798d0841a5
- MD5 4de3edb2ec9d71ce6ca27d8af63c445a
- SHA1 f31a32703ce17f23934fad46a8ab7a6cf472ef25
- SHA512 eb4355cda29389aac7f8fbc64b9d78cd2328c6488e53d7ac420d2f9d9657e51433b977436d20c12e6e08eb8cd579acfb1db5eb177b1cebe1aef331a36d74a64d
- SSDEEP 192:WvXQE3NkEwymG2P+aUgk3Y8PJWEeH0pLSpmFknE/e2Z3UTSP2PT+JInwc1T/+lt2:3E32OCWaUggY8PJUnMqTX1T2AkQ
- TLSH T1DC42A7024C2D44A4E38300ADF5539A877EA7A55B60760C3877AEC1B56F4D17CA2B16BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/crack_ntdll.py
- Size 10KB
- SHA256 597f9ec345fc0999b622d056e72ffac53c202bfd983778fe3b4e5e314a41d6d3
- MD5 4e9e85098edc47176bfafb1fe7165ee9
- SHA1 01aa2c6ab9a8fd0b4a7a286ed3c8e9d9833e78fd
- SHA512 319d261152d26abf1d91d3f61a2c76f1c6cea6f472dc01bac3cdd0caa21d72ed749b9548d938221628d8aa73df82c46b177cf086c8b30fd655da8ed82dfcbd34
- SSDEEP 192:zudxpkXAE3Wkommv2P+pUgkb8P7w4drv+knKpG/giw4eXs4x2PT+cCc1T/+lto6R:z6pjE3ZoxOWpUgG8P045QQ6eTX1T2IQ
- TLSH T11A2294030D2C4065A383046DFA528ECB7FA7655B50764D38B7AEC1B52F5D1BC63B06B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/deep_pe.py
- Size 4KB
- SHA256 c15b5d100b0d50eb6d96c73bf51a85da595a11ba0f91dbab89b2afe2aa4d292a
- MD5 2f6d6d9121446b329f176f9f703afcac
- SHA1 ece98e51af4d89ab736fec0459b0b38e3541f40b
- SHA512 57fb98f121b66e93d7678f47d4c9a2ecf42531a44c13a099c4da4e596bcfc3059955c877bd4d96a99c833f4b89021088983cc4bf870b5c85a417d854906e7ce5
- SSDEEP 96:kMddDGTdcszpNhkJ9ArzcS4toeVMWvRbZ3LNFwJKyM1f:kMdhGTdHz9NcXEWvH3LNFsUf
- TLSH T19681620BF5307861F5D267E8E94B0D04BFAEF02F76247461B29E42986F46178E275E38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/drive.py
- Size 3KB
- SHA256 47d5ab1cb443ef6b58c63ebede81caa53c7a9469423e3bc0bcad80ac4bd3010d
- MD5 ff746bb3636b8d04b4c65827fd1456bc
- SHA1 7ca9436d09eeb33e68c4c2200f303397755912e4
- SHA512 3952214d4b7fb037726ea9ce7a0748f026758d4268029806567874701ea6906722b8ecedaff8d7a4e3a7be4636895ecdf8d3df4002ed0be20a1c2d4da8fb5012
- TLSH T1CA61D8318D25367EC79A5828CB28A2A16317775B1B083A347EECC358EF2D479473463D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 05_HARNESS/dump_mem.py
- Size 7KB
- SHA256 61a27249a7323cb958a1659fc3b43130b03afe95db4c74101752d67745609f2f
- MD5 370c3556f1454f2ebb5f497ef90f46e6
- SHA1 ff3563a7125beaf3c61fa7decca38631196b894e
- SHA512 656a63636f311c3c6ec27bf0f3af812d9f3b1ff15ce606539b810ff8a41af92de0f3b3d59875c62aa60343ba192a490031db656b9ff9d2ff5bf5f0021aaf8d91
- SSDEEP 192:3NHUGAJC8teo/k3VqVoGhVGaD47ySGgqZLQhfZwMu/poBeDRPSRyi:9HAYseCUaD47yPMmlPSx
- TLSH T1BEF1B5074C8D4AB493831414E96646937B46260B48392E2CBFEDD2F45F0E2BD437A77D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/elev_test.ps1
- Size 646B
- SHA256 c8a5f43807338d6f98c6902e670f0282b873fde07285c0be2d59c5050e7022d6
- MD5 70eb270cca4456b62e6a07781d20f5ce
- SHA1 fcea4d9244d72b201e9645fa895eb5712665a3a1
- SHA512 8403b7345c7ba4effa83eece4c8d16f2341fb679707abe0c31ebf6f9c916e9b0d688b5c37167e3563762bef176970505830755b901987f1bec36678e72f83029
- TLSH T12AF09ED0DFEA991416341A29583CF106003A43771AD578D4FFF8C349EE98A06C2B918E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 05_HARNESS/extract_all.py
- Size 7KB
- SHA256 161f72fdcf62146182a6253f8a5f9dd33e03c17ec0e30a831b772e58f8ab3ca3
- MD5 d83ce65d698bd064aff5a48cdc0f02a8
- SHA1 e11bcf539f7a0fdf5c57183bfdf7f75bee8279e4
- SHA512 757e0602f045bb0ad472f75fa8eef15a6aaecc7be0ea12e65d15e34c4aa36988d983a6131302eae338379c55700d0648ac95bbbb26ae1610e8d7d22c921cf154
- SSDEEP 192:LBLyNMo7ER5ETW9jsOMQrZrKVYI0u9S0vltU3NFti:1Lho6ZgxsZKVYFOvTIBi
- TLSH T148F1EA12AC9802348393C6B9DBEB511AF76A762356541E54FBECA1F04F804BD863C3AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 05_HARNESS/extract_deliverables.py
- Size 5KB
- SHA256 4d180fe05959d54e7d62a9cb8e60f4ba18d8d5c0adbaeb244baa0c815892b1ee
- MD5 52505510e6dec954d2add3a609afbcd7
- SHA1 82b87bac92502499ce04cf5a7fe407815cae86cf
- SHA512 5abcdd6aeb65a68261721bc01444a3e33b71ad7c4485d9d8cedf119d7c7eb444282405197aa75a3b3f829272ebbfe47559cb0f193a41691febeb00d930d897ed
- SSDEEP 96:Szh9N/WYaP0xJlhM9rQV0PKJDskOtHpJkyqCSWqZZLALyfazHlrnTmUu:SnNOMFhM9rQGUbOtJJIWqZRA2CxTmUu
- TLSH T168B10903941B223183A7479B822F35E97B9EE56163A1691D34CED1F8DB312B8C36A0C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10