General
- Target kk4g2yegyz.exe
- Size 28.5MB
- Sample260922-nyrfcsde52
- SHA256 7d075ecaf0015620de2db6bf4bd19de1c3cc62ceb3c8a69ef41280ad798fc9c4
- MD5 936895f836b1b058d594214c66d2e3c6
- SHA1 3302f540b17f6132a05cc75d6c6a08081caf95fd
- SHA512 15685ea00f8811f68971f8e0e02e45ea9474ce60dfc3c983067d33135a70143c95a4b61f3b632bb6cf7cde8df58a325a4a05a90a25be2421a41b20b18c39f0f8
- SSDEEP 393216:HoGqxCURHwLBhA6pXqRjWqGP2rlmTg8cJVJXe4Df2OAUs7KA0+i4ElBADQC:+HwLk8q10OrITiJnXe2fDsb0+BEkDQC
- TLSH T1256723FF64D0219CF8C68831E24566FDE487347B4EFA581B6F8616121930C9ACEE593E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kk4g2yegyz.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target kk4g2yegyz.exe
- Size 28.5MB
- SHA256 7d075ecaf0015620de2db6bf4bd19de1c3cc62ceb3c8a69ef41280ad798fc9c4
- MD5 936895f836b1b058d594214c66d2e3c6
- SHA1 3302f540b17f6132a05cc75d6c6a08081caf95fd
- SHA512 15685ea00f8811f68971f8e0e02e45ea9474ce60dfc3c983067d33135a70143c95a4b61f3b632bb6cf7cde8df58a325a4a05a90a25be2421a41b20b18c39f0f8
- SSDEEP 393216:HoGqxCURHwLBhA6pXqRjWqGP2rlmTg8cJVJXe4Df2OAUs7KA0+i4ElBADQC:+HwLk8q10OrITiJnXe2fDsb0+BEkDQC
- TLSH T1256723FF64D0219CF8C68831E24566FDE487347B4EFA581B6F8616121930C9ACEE593E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: LSASS Driver
Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger