General
- Target Kirra_Lock.exe
- Size 10.5MB
- Sample260912-vyfr7a1erc
- SHA256 10a435dc50eda8a5baf7e0d8e371cbfa9f4490fb873419c5c3846afc657595e3
- MD5 9d24a5bae1e719b217c962369a333eb3
- SHA1 8a474a69a708e8b426ae8149dcb9ce38d0846eb6
- SHA512 699d26c89373cfe5bc0823a6a6e67c5ce07451e162311b9324ac5ea8858f4a9e77782d4db6bbd39c4e73ae214ad8699200bb0db05724327c068bb783415190f5
- SSDEEP 196608:GAs6VrHO203ik7vc90zm3xSWm6LVr23xSWKvgLhkGcijP:GAs64r7UazmXm6xr2BSWjk
- TLSH T1D5B6338E5E61446FC3826EB85FE0FA3CA43EAFF21D155945A62072F9BB77F482C41109
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kirra_Lock.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kirra_Lock.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Kirra_Lock.exe
- Size 10.5MB
- SHA256 10a435dc50eda8a5baf7e0d8e371cbfa9f4490fb873419c5c3846afc657595e3
- MD5 9d24a5bae1e719b217c962369a333eb3
- SHA1 8a474a69a708e8b426ae8149dcb9ce38d0846eb6
- SHA512 699d26c89373cfe5bc0823a6a6e67c5ce07451e162311b9324ac5ea8858f4a9e77782d4db6bbd39c4e73ae214ad8699200bb0db05724327c068bb783415190f5
- SSDEEP 196608:GAs6VrHO203ik7vc90zm3xSWm6LVr23xSWKvgLhkGcijP:GAs64r7UazmXm6xr2BSWjk
- TLSH T1D5B6338E5E61446FC3826EB85FE0FA3CA43EAFF21D155945A62072F9BB77F482C41109
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Creates a new local user account
Uses net.exe to create a new local user account, often for persistence or a backdoor account.