Overview

overview

7

Static

static

3

KIS Trial ...12.exe

windows10-2004-x64

6

KIS Trial ...12.exe

windows11-ltsc_2024-x64

6

TechTools.NET.url

windows10-2004-x64

7

TechTools.NET.url

windows11-ltsc_2024-x64

4

TechTools.NET.url

windows10-2004-x64

7

TechTools.NET.url

windows11-ltsc_2024-x64

7

Kaspersky ...US.exe

windows10-2004-x64

7

Kaspersky ...US.exe

windows11-ltsc_2024-x64

3

Kaspersky ...29.exe

windows10-2004-x64

7

Kaspersky ...29.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Kaspersky Internet Security 2016 v16.0.0.614 Build 8529 [TechTools.NET].rar
  • Size 169.2MB
  • Sample260905-nt53yszzfs
  • SHA256 eddda88744fbdf44b62c6368b9c16658090548a2abe6157bfdd7a115db7730d1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      KIS Trial Reset/Kaspersky_Reset_Trial_5.0.0.112.exe
    • Size 2.8MB
    • SHA256 025acb6c872cb553793ad8df772d2dcd2cfb29ba882a9b08cbca9e0f6b73cce8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Checks for any installed AV software in registry

    behavioral1behavioral2
    • Target
      TechTools.NET.URL
    • Size 209B
    • SHA256 804476c2d5c96145f0b0e06aefab4531573d27b4c3db4b7753f995a18fe56257
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral3behavioral4
    • Target
      TechTools.NET.URL
    • Size 209B
    • SHA256 804476c2d5c96145f0b0e06aefab4531573d27b4c3db4b7753f995a18fe56257
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral5behavioral6
    • Target
      Kaspersky Internet Security 2016 v16.0.0.614 Build 8529 [TechTools.NET]/offline KIS16.0.0.614en-US.exe
    • Size 166.5MB
    • SHA256 c6a1cd5d5e3b9ae7a97b2d778db224ba3a854509ee0133a45ddae971fe36bd2c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    behavioral7behavioral8
    • Target
      Kaspersky Internet Security 2016 v16.0.0.614 Build 8529 [TechTools.NET]/online kis16.0.0.614en_8529.exe
    • Size 1.8MB
    • SHA256 08dbed1b5214452abed26a231d88333fc186eec7173a55256224fa9665db6312
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks