Overview
overview
6Static
static
3Kyndred_1....up.exe
windows11-21h2-x64
4$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...nu.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3Kyndred.exe
windows11-21h2-x64
6frame_bench.exe
windows11-21h2-x64
1General
- Target Kyndred_1.0.0_x64-setup.exe
- Size 23.6MB
- Sample261027-mapfesb18y
- SHA256 329ba23f82783153f37c52ab1f4845688dd839a3b0a3a9f41996067da51f1576
- MD5 3217f06470ac6c21aa679cd7cad12c27
- SHA1 585b94fdd1416054aaea09d039ae6eeb2e5a4a36
- SHA512 30fb9a07cf12e6b8f1b3afe916a11ad9d758bffc117fa1ca4583d6401f982e953489594db38a55c61ba4459b9e604e119fde3884f1667c7a53d0b6930216697e
- SSDEEP 393216:0n6wxGztVx18aUUfqY2rsYEo3byM0mTAx2ZFpjYLi/PtqTd/Ik0mP/PgXV:06w+1GY2rsGbeiZ0u/PkTPP/PCV
- TLSH T13F4733A58281CF26F0879CB98955B0109B3F0B1F02A93B5BB3116579E7E38F83936D57
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Kyndred_1.0.0_x64-setup.exe
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
Kyndred.exe
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
frame_bench.exe
Resource
win11-20260911-en
Malware Config
Targets
-
- Target Kyndred_1.0.0_x64-setup.exe
- Size 23.6MB
- SHA256 329ba23f82783153f37c52ab1f4845688dd839a3b0a3a9f41996067da51f1576
- MD5 3217f06470ac6c21aa679cd7cad12c27
- SHA1 585b94fdd1416054aaea09d039ae6eeb2e5a4a36
- SHA512 30fb9a07cf12e6b8f1b3afe916a11ad9d758bffc117fa1ca4583d6401f982e953489594db38a55c61ba4459b9e604e119fde3884f1667c7a53d0b6930216697e
- SSDEEP 393216:0n6wxGztVx18aUUfqY2rsYEo3byM0mTAx2ZFpjYLi/PtqTd/Ik0mP/PgXV:06w+1GY2rsGbeiZ0u/PkTPP/PCV
- TLSH T13F4733A58281CF26F0879CB98955B0109B3F0B1F02A93B5BB3116579E7E38F83936D57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04
- MD5 ee68463fed225c5c98d800bdbd205598
- SHA1 306364af624de3028e2078c4d8c234fa497bd723
- SHA512 b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107
- SSDEEP 384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij
- TLSH T175622D45AA2084F1DBA2167034D73A7A67F18E752A2449C347F35D4EEE16307B33A986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
- MD5 d070f3275df715bf3708beff2c6c307d
- SHA1 93d3725801e07303e9727c4369e19fd139e69023
- SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
- SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
- TLSH T1CCF1C7B6F3D10673F9AB427428232F221B1AF5215765C1AB450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 29KB
- SHA256 5ef1f010f9a8be4ffe0913616f6c54acf403ee0b83d994821ae4b6716ec1d266
- MD5 c5bd51b72a0de24a183585da36a160c7
- SHA1 f99a50209a345185a84d34d0e5f66d04c75ff52f
- SHA512 1349027b08c7f82e17f572e035f224a46f33f0a410526cf471b22a74b7904b54d1befb5ea7f23c90079605d4663f1207b8c81a45e218801533d48b6602a93dbc
- SSDEEP 768:jnvg/4R1C7063G5I1CabuqcFKpnq0jdhK7W+q:jvu4RM2WCqYMX/
- TLSH T139D23818FDC83EBAD6DF1172281C4A6E559FC8080754CEABD3B15E62D4A63722EE510F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Kyndred.exe
- Size 31.2MB
- SHA256 e7b25b9dd099d924ae7c827afd084554ae55808954b5bda61e1dcbcdcfc9d31f
- MD5 c5014ef5d9829cf6ae0faf8d396b0f3b
- SHA1 198fe283e171604a29eb1f553c15ccf8a17efb81
- SHA512 ef68925ca474005efb230b8bf5074a4fd4a56452ba7d9e1d88275e38c65b5e5371202f4052203aab4912e083cdf6f21879c52841ce56a119068ebab13a4e8aa9
- SSDEEP 393216:0p1++srjAPmSER/1o3QtYA6kHeM/K7EJo9qWKuatt3CuwBwvTfJbgsq:07++sUm/11o0Y3KD/NJtWKZPQwbE
- TLSH T11777DF217B9A996DD05AC47083868A725B3170DB0B35BAFF44D446393FBDAF81F38258
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
- Target frame_bench.exe
- Size 2.6MB
- SHA256 ba4e93a6c6dd62ac6750e0710bfba1f6266769d61113dfd72f155e37e11fbfa7
- MD5 87660546254af6cb94d47d69215bae80
- SHA1 e8c613fba6cc9ecadaf62a4c2dd3b6ce4c9e26cb
- SHA512 a2227aade68c53837adf4bd6670b921e3b6415533425883c60d8cc72032c41009177b5c378edc88bf8c704a697c67872c460bcffc3da20870ef9a01d82b2cd63
- SSDEEP 49152:b28+2/mAfXHyn5bNmvVbsqzORrQ7iT1hPJgnVJw:tunnOiqQT1hPmVi
- TLSH T1EED52901FA4B59ECD19AC47083464A625B35B4CA0B31BAFF129485353FBABF01F78799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1