General

  • Target
    Kirra_Lock.exe
  • Size 10.5MB
  • Sample260912-vyfr7a1erc
  • SHA256 10a435dc50eda8a5baf7e0d8e371cbfa9f4490fb873419c5c3846afc657595e3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Kirra_Lock.exe
    • Size 10.5MB
    • SHA256 10a435dc50eda8a5baf7e0d8e371cbfa9f4490fb873419c5c3846afc657595e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Creates a new local user account

      Uses net.exe to create a new local user account, often for persistence or a backdoor account.

MITRE ATT&CK Enterprise v16

Tasks