General
- Target KIRRA_SPAM.zip
- Size 30.6MB
- Sample260916-xffetavakb
- SHA256 3f5b9e5aa0fd3d663e48bfb1b50c250a76680d47edd1e569c5eb85efdad1445a
- MD5 b78f98b02467cd35b7e00d917e0840c2
- SHA1 01651a76bb4aa8c3748c8e720c130b38de3fec55
- SHA512 593e46ec56a9cc851540d6bf32919d9463aeecf40e6e42580184d005be254fb6998b6d55e97f4fd059eea102a59c826735688cf68c406f7eb1825b5cad4491e1
- SSDEEP 786432:FWwEmVIwhhn/ZXEWHwV6L4VIQD84uSTeExX3NR1mzpyc3p:FWwEMIEn/BECS6LYgSTemX3NR1mzpyc5
- TLSH T1F167336E2BC719EFDF98DDB42497E50BE3A742DE60F94A2933E710DC4A140E45BA0931
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kirra_Spam.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Kirra_Spam.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
Kirra_Sweep.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Kirra_Sweep.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Kirra_Spam.exe
- Size 23.4MB
- SHA256 6ab089ce9b2653f704fea49aa79572c0e7285d99a3dd1f4efb0de0a37fe46e5d
- MD5 a197ea5531ce2b2cab03470e8840a2d3
- SHA1 4657438706cc05a0716e2febcf43e8704836651e
- SHA512 c8208e3dbd4dccc7455df5059ca2ebdd3381aa215e03715d13713b900d6ad280a4eb4aee2d151e882723ac56f3f5dca69c96c40abef7ef98ff10df7a7e188af7
- SSDEEP 393216:c1OioUiK9mbrj5deHpydVhDVZnHgqsTSIOJi03mQu3S//3b7gM8y1vhbXMX+7gZ:c1Oimnju4dLDVFHts2IOg03mA/3bkk7a
- TLSH T1B637333B6BD349FED387CFB817A1F23BE1BC59B53835891A925274D8BB30A486B54110
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Loads dropped DLL
-
Modifies file permissions
-
- Target Kirra_Sweep.exe
- Size 7.6MB
- SHA256 4a6c7cb4876723988a921a120418ac9eefe576ff41b1c8931a16972b6efaf52e
- MD5 1ebfc3efbea9cda1b80a47980747cc62
- SHA1 f5ba9510b038b0394d39a14d3f027cea99496668
- SHA512 eab51e149a6003d82f3f5db75fbc4f7f7ba6c729a7fd5c59a6485011da697447e0d9e1d4bbf20ed3f681a98a9220bf06534e48ac28ee195f33c0abb11cf97f15
- SSDEEP 98304:Oqb100T3JNpsduHzAd1DFpIdhahHty1sYI7QQInxMfDRzKFLyBl9vQYCTNdc0ikF:Z607psakPzYhePlIxMbRr9vJCZifUY
- TLSH T1808633A95FD7A44ECB03A3BC79E6F3BA707DDAE034019703C5612564BFB1EA86D80095
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL