General
- Target KAMARI-DMA-ready.zip
- Size 5.8MB
- Sample260913-pbad1ayvas
- SHA256 d1570f79e84b6c4069f4ae8746554c6d1b1446a73eb1e8919221cc6597d5d5f0
- MD5 5430d29d70f2a3c90da44310b5f3e00a
- SHA1 b011a56b8a2ef71d3c296d921ef4dc1097d999a2
- SHA512 5ceccc2a7b91908af264a207065cd731be573683321467da13094ecf91d2ea17e444194ad7093dadcf6776378ac424d9630850db852052f06dd2b87559c72f2f
- SSDEEP 98304:qsJX2mK59BMF9bIXq6kWKVOcukzd+0EaGQX49B7DtLyYxltYiuT35+wjyf/WG/vz:qsJZ1F96nZKVOcvdXVI9ZsYDSTL5njyh
- TLSH T1B65633D402D4BF057213A65CAA369760AB8995AF727364309F5C32270FCB3CE658B9D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
KAMARI-DMA-ready.zip
Resource
win10v2004-20260911-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target KAMARI-DMA-ready.zip
- Size 5.8MB
- SHA256 d1570f79e84b6c4069f4ae8746554c6d1b1446a73eb1e8919221cc6597d5d5f0
- MD5 5430d29d70f2a3c90da44310b5f3e00a
- SHA1 b011a56b8a2ef71d3c296d921ef4dc1097d999a2
- SHA512 5ceccc2a7b91908af264a207065cd731be573683321467da13094ecf91d2ea17e444194ad7093dadcf6776378ac424d9630850db852052f06dd2b87559c72f2f
- SSDEEP 98304:qsJX2mK59BMF9bIXq6kWKVOcukzd+0EaGQX49B7DtLyYxltYiuT35+wjyf/WG/vz:qsJZ1F96nZKVOcvdXVI9ZsYDSTL5njyh
- TLSH T1B65633D402D4BF057213A65CAA369760AB8995AF727364309F5C32270FCB3CE658B9D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger