ce236ef861908cf5f29c45a8fb770dd1accf2428e78861f7a7625259c81f6be9

Analysis

user interaction
yes
max time kernel
30s
max time network
20s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/10/2026, 12:20

Target
Kirin-Tool.exe
Size 543KB
Sample261009-ph2f3aah68
SHA256 ce236ef861908cf5f29c45a8fb770dd1accf2428e78861f7a7625259c81f6be9
MD5 d2d057199bb6503cff54ba780408a7db
SHA1 99153d67567af7b6a3e15e86d1427d60ac9383c3
SHA512 ac603f63b186f1f0ace3d368e0943bd3d0cf2078bb2bc261c45dd4a9a0862d2cd166d17ba05239e3bdc517f723f33e45e8db9e9742f3e433611d61761452045c
SSDEEP 12288:ayBlCI78IVO68ZVnXqf1ogKMFpz4dsPw1X3AhTw5CCZdHyzI:hBlUZVhqFpzxw1X3Ai5CCnH
TLSH
T129C4F147B29911FCE2A7E37899A34641F3B7B856473193DF0360C63A1F66AD09D3A720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\Kirin-Tool.exe
"C:\Users\Admin\AppData\Local\Temp\Kirin-Tool.exe"
1⤵
PID:1936

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4464