General
- Target kirkware_loader.exe
- Size 1.2MB
- Sample261029-26tgksty9j
- SHA256 793eae8e87722db796d53180f561cf875e462f87b8c5a016a99dcad570baa1f3
- MD5 6c2adcb7bfc7685dfb288cd959835472
- SHA1 5926873043c73fe2c35d0b8e2175fff03724f10d
- SHA512 4e50728117eb57b9f6bc2a320b308c51db2a1e611f31885e1318f11aead0684b1addfe713108bfba63f491a8edc4680e8943258acfc35f4ac6d63ae579667519
- SSDEEP 24576:KFa1GL/EjaRWaAA5vnAqLnr0ZAW8m9VVAPZf4OZ20B/nk:u0K05WnHr019VWPN4OZjB/
- TLSH T1F8459E4BE6A610F9D1BAD038C556651BFEB13895073097CB67D00A662FB37F0AA7E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kirkware_loader.exe
Resource
win10ltsc2021-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target kirkware_loader.exe
- Size 1.2MB
- SHA256 793eae8e87722db796d53180f561cf875e462f87b8c5a016a99dcad570baa1f3
- MD5 6c2adcb7bfc7685dfb288cd959835472
- SHA1 5926873043c73fe2c35d0b8e2175fff03724f10d
- SHA512 4e50728117eb57b9f6bc2a320b308c51db2a1e611f31885e1318f11aead0684b1addfe713108bfba63f491a8edc4680e8943258acfc35f4ac6d63ae579667519
- SSDEEP 24576:KFa1GL/EjaRWaAA5vnAqLnr0ZAW8m9VVAPZf4OZ20B/nk:u0K05WnHr019VWPN4OZjB/
- TLSH T1F8459E4BE6A610F9D1BAD038C556651BFEB13895073097CB67D00A662FB37F0AA7E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1