KronoStruct-2027-Windows10-x64.zip
- SHA256 c6c3b71aecd86f386ee55c52fddbffb1979b5c749b44ddd1141517ec16268051
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KronoStruct.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
KronoStruct.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target KronoStruct-2027-Windows10-x64.zip
- Size 19.1MB
- Sample261102-afgljsfz8p
- SHA256 c6c3b71aecd86f386ee55c52fddbffb1979b5c749b44ddd1141517ec16268051
- MD5 c4ad27952257f9655e4427beb03ebc94
- SHA1 82a21c4bc063dda99279ef018f54d874fc517b05
- SHA512 b9671f8c2b92ed24a88119fa1cd2c836909d9b0e6aa2f757ee0b5245f2b85598c34093381f516c9035e4f0ca878cb3f6fc6547face56281ad393fff9350a6e4a
- SSDEEP 393216:0pOl9N4pe79+RmrZey+uRH/qcKYL4ayrlCizOTtun2R/NUZnml+KPv7OSyaPTR5i:eaPWeARyZeyDHN4arPtun2R/NUHK37xy
- TLSH T17B1733CA45005FE9A081E4E4B8950F0C517B8E1249BADEFDAAC654F471FB7822D7ED0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/KronoStruct.exe
File Explorer
-
KronoStruct-2027-Windows10-x64.zip.zip 19.1MB
-
Edificio_4Pisos_Robot2027.rtd24KB
-
KronoStruct.exe.exe 45.6MB
-
LEEME-Windows10.txt1KB
-
LOSA 40 CM -APOYADA AL SUELO - ALTERNATIVA 2 (1).rtd2.0MB
-
kronostruct-rtd.ico22KB
-
kronostruct.ico69KB
Edificio_4Pisos_Robot2027.rtd
- SHA256 e92e6a9d601237915eff8cb6b3244c706ccbbabb6e307f03ad9df57831d04b3b
- MD5 c074d324fc07f7468a01a8706b08f8b6
- SHA1 a99e534e038b59b861c323ac3deeef21752deaee
- SHA512 5a5d95d6326295ecba872b7bdbec7e6ac0afb5830df8dbafb1bad7ccf8322707ca82e40c251501715fb9b0adf8fc2dcc3ad27f509bfa912894890b728ee92375
- SSDEEP 48:q11p2zY9HUIHUVyHUmSr5h1LCnRZiDe5NjBpR0Ad+yCaHI+j:q1T2zmj8yUVrWjFp+lKl
- TLSH T110B2F307B740CA29C068AB304E8AC75EA357BD379E25160B3CC9B70E2E724C46D56BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
KronoStruct.exe
- IMPHASH b1e7429b9cf82baeaecc575fc85d99bf
- SHA256 2762638533d78873018c258eb7a8ecb9c3a7379287cfa77835bde2711388d712
- MD5 7683be2329bf36d2d9147ec6a1266015
- SHA1 949df9ca141f242826ca8fc02dbb9151edb24d0b
- SHA512 38a40a33616c19224fb13b1783028df292d4ff8fa995ad193a8c223c682abea461435247068d35e68bf69ee0793e3ce56489a00cb267a4c40bc7da09c32e954d
- SSDEEP 196608:sG5igCG8kUAms2290vfp7S+7On7bL8iZ/xBX4bJ54DE28eOeAvW3Q+INqa4kNQH7:55ZrY23XYIpBX7zQ2e4kNQy
- TLSH T1CDA75A43F26391BDC16AC074935AB233FB317C8A45357DAB5BE08B312E65B50AB1EB05
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
dwmapi
DwmEnableBlurBehindWindow
DwmSetWindowAttribute
imm32
ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow
ntdll
NtOpenFile
NtReadFile
NtWriteFile
NtCreateNamedPipeFile
RtlNtStatusToDosError
uxtheme
SetWindowTheme
ws2_32
WSADuplicateSocketW
WSAGetLastError
WSASocketW
WSAStartup
accept
bind
closesocket
freeaddrinfo
getaddrinfo
listen
recv
send
setsockopt
kernel32
CreateFileMappingA
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimePreciseAsFileTime
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
MapViewOfFile
Module32FirstW
Module32NextW
RaiseException
RtlUnwindEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WriteConsoleW
__C_specific_handler
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
SetThreadErrorMode
AddVectoredExceptionHandler
CompareStringOrdinal
FormatMessageW
GetModuleHandleA
GetModuleHandleW
GetUserPreferredUILanguages
LoadLibraryA
LoadLibraryExA
LocaleNameToLCID
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RemoveVectoredExceptionHandler
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
WideCharToMultiByte
GetProcessHeap
HeapAlloc
HeapFree
CancelIoEx
CloseHandle
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileW
CreateProcessW
CreateThread
CreateWaitableTimerExW
DeleteFileW
DeviceIoControl
DuplicateHandle
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsSetValue
FlushFileBuffers
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetOverlappedResultEx
GetTempPathW
GlobalFree
InitOnceBeginInitialize
InitOnceComplete
IsThreadAFiber
MoveFileExW
ReadFile
ReadFileEx
ResetEvent
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetThreadStackGuarantee
SetWaitableTimer
Sleep
SleepEx
SwitchToThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile
WriteFileEx
msvcrt
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_errno
_exit
_fmode
_fpreset
_hypot
_initterm
_onexit
abort
acos
asin
atan
calloc
cosh
exit
fprintf
free
frexp
fwrite
ldexp
log10
malloc
memcmp
memcpy
memmove
memset
signal
sinh
strerror
strlen
strncmp
tan
tanh
vfprintf
wcslen
user32
CloseClipboard
CloseTouchInputHandle
EmptyClipboard
GetClipboardData
GetTouchInputInfo
IsClipboardFormatAvailable
OpenClipboard
RegisterClipboardFormatW
RegisterTouchWindow
SetClipboardData
ChangeDisplaySettingsExW
ClientToScreen
CreateIconIndirect
DisplayConfigGetDeviceInfo
EnumDisplayMonitors
GetClassInfoExA
GetDC
GetDisplayConfigBufferSizes
GetMonitorInfoW
InvalidateRgn
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
QueryDisplayConfig
RedrawWindow
RegisterClassExA
RegisterClassExW
ReleaseDC
ScreenToClient
ValidateRect
AdjustWindowRectEx
CallWindowProcW
ClipCursor
CreateIcon
CreateIconFromResourceEx
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageW
EnableMenuItem
FlashWindowEx
GetActiveWindow
GetAsyncKeyState
GetClientRect
GetClipCursor
GetCursorPos
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetPropW
GetRawInputData
GetSystemMenu
GetSystemMetrics
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
IsIconic
IsProcessDPIAware
IsWindowVisible
LoadCursorW
MapVirtualKeyExW
MapVirtualKeyW
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
RegisterRawInputDevices
RegisterWindowMessageA
ReleaseCapture
RemovePropW
SendInput
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetForegroundWindow
SetPropW
SetWindowDisplayAffinity
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoA
ToUnicodeEx
TrackMouseEvent
TranslateMessage
bcryptprimitives
ProcessPrng
dxgi
CreateDXGIFactory1
gdi32
ChoosePixelFormat
CreateBitmap
CreateCompatibleBitmap
CreateRectRgn
DeleteObject
DescribePixelFormat
GetDeviceCaps
GetPixelFormat
SetBitmapBits
SetPixelFormat
SwapBuffers
ole32
OleInitialize
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
CoInitializeEx
CoUninitialize
oleaut32
SafeArrayCreateVector
SafeArrayPutElement
VariantClear
GetErrorInfo
SetErrorInfo
SysAllocStringLen
SysFreeString
SysStringLen
opengl32
wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetProcAddress
wglMakeCurrent
uiautomationcore
UiaGetReservedMixedAttributeValue
UiaGetReservedNotSupportedValue
UiaHostProviderFromHwnd
UiaLookupId
UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaReturnRawElementProvider
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
advapi32
ImpersonateAnonymousToken
RevertToSelf
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
cfgmgr32
CM_Get_DevNode_PropertyW
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_PropertyW
CM_Get_Parent
CM_Locate_DevNodeW
combase
CoCreateFreeThreadedMarshaler
CoIncrementMTAUsage
CoTaskMemFree
hid
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetManufacturerString
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetCaps
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
shell32
DragFinish
DragQueryFileW
SHCreateItemFromParsingName
SHGetKnownFolderPath
shlwapi
AssocQueryStringW
Name
.text
Size
37.1MB
Virtual Size
37.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
5.6MB
Virtual Size
5.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
630KB
Virtual Size
629KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
71KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
90KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
LEEME-Windows10.txt
- SHA256 4bb026b483c69f1fffe9b4fdff9186ede60472b21ffd54b99424d333afe19b31
- MD5 77ffb4671fe730857ae595fe04ebcdcb
- SHA1 cf6399456dbba42d339565e41ddfcf28e5ed6395
- SHA512 a6a865265ebf2a4763fe9ed678d12cce11fce8a6cb99bf601bc67e611b893d9e27e83d4a4482a80b575a27b4e58db7eb1aa01fae50769c4ed0f24abfdbc85d0a
- TLSH T18E21A51CE2B4820192238202A36A07CF956FD861200E51E3E0DF42BC6CE078F036B86F
- MD5 SHA1 SHA512 TLSH
LOSA 40 CM -APOYADA AL SUELO - ALTERNATIVA 2 (1).rtd
- SHA256 240b3b30259b969956458113163624a0b70fd81560664d0cefbb4f0418d87650
- MD5 2741d96826ce65d338e7d23df8c76e5e
- SHA1 2f99938bc7a4e5dc615ebea13c4fd2853760ff6b
- SHA512 a63290979ae2feae4c1668285eee8e676e69d126ee6f67cfa8051937fe6bddd8dc0cdb28b365fedbb1375f88de5f8744baf61f66a0b4310aaedced42838e38c8
- SSDEEP 6144:WnVyRoUBCcnVyRoUBCEnVyRoUBCi/SkSUHsAs8nVyToUBUjNTR3J2JOElt0VL3x7:f/SkSUHsiIltt
- TLSH T166A51F03BB918582E4715A745DB69B5A7333FC246F325BA73684372F2DBAB401C063E9
- MD5 SHA1 SHA512 SSDEEP TLSH
kronostruct-rtd.ico
- SHA256 b0d4e95ac0132a8422366b2c00e9173df493f33fb4d3b334253cebd04315b0cb
- MD5 53cb4467d86753a35c5acca9873b38df
- SHA1 c01f927101a271557370621e39a242d237fd8f06
- SHA512 b0c4ea4e067663d1948f2f5288f0cdcb729ffd9c0639f9f3e84f8e0f38385341071426c31a1ebded733207ae55e7fb0950a7095fb37e246691392a74c043c85a
- SSDEEP 384:cQsQVs0RBnOXnDlRkgEkDqOAswcFXQ69yoXi4Ok8ckwcsJamWsCf+BwtRAKZ4R9m:RsQVs0OXDlRfGTcFBZB8cRJamcO2zyXY
- TLSH T148A2E1C29A1D386E0B847293C565CADDE0E2BDB38C201E8BA75553209D56FD708FDBE4
- MD5 SHA1 SHA512 SSDEEP TLSH
kronostruct.ico
- SHA256 e7760b6858448a2180e52662ad72fae7f46495f9e07cbec4f86fa1298ebbc5ff
- MD5 a1a0e77456f22c21ef35cef9fbb7ede8
- SHA1 0ee461ef47551e84eaf88c2c7d6b10125186a836
- SHA512 5c9d246a173191ec4564ea43eaf8ba9fe1e99d9266411e838bb4522c853e0c643c0d9fe3d650701e44d0a1c0bdcbdfd0f46c6b9ade772c150e5bf698239ab3eb
- SSDEEP 1536:6uL1auHhAViixCH9LOR1tliugUZGyv8ZSFwE99KstsAGVWyLrOLXerVHwY:FLthAdELORViugUvv8ZSFwE99p6vVWyf
- TLSH T1C363B0CED959B1B1E4039BDBCE41CBDCC77543A969CA1A8FC36B34A12F1B9230895784
- MD5 SHA1 SHA512 SSDEEP TLSH