3a8529a13c2cab46bcec183321ff266ae33623119924090ad47b222d237899f5

Resubmissions

04/11/2026, 20:17

261104-y21tbads21

04/11/2026, 20:11

261104-yycbjszv6n5

Sharing

Copy URL Twitter E-mail

General

Target
KiddionsMenu.rar
Size 89.5MB
Sample261104-yycbjszv6n
SHA256 3a8529a13c2cab46bcec183321ff266ae33623119924090ad47b222d237899f5
MD5 033bf6f2ee3472db4902f3b315830dce
SHA1 c5e25d49393fae62e5353240153253ffcabf92b2
SHA512 a0623b005088406bd15ce3893664deebaabebeac057fc1faa910bf68b9ba94e7107aab6d029a2918afc3b5149e0d9705fc6924673e785916336aef8a4b105705
SSDEEP 1572864:LTF/NZSwGFzC0ksd7dfZkTWY6Xlon3ZRrfX37soJKNAPJakOb4lWyy8RMxHdA+XD:LTF/NZSwGgsxdFVoTT7JJNPJibIpRsGg
TLSH
T1792833A9A76503F4558B1525C3CC0BEFBA1BBAAD2E3701714F8FCD48C0D71AA79B1849
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  KiddionsLoader.exe
- Size 1.1MB
- SHA256 dfb4b91a45f0fe1ebe759725b213ce905c04c45d889c713874e8deca5a410135
- MD5 090af036c2545ecffc9eb7a4ea7e5b25
- SHA1 4aa89ed77d48bcb740418f10cc8959e42360c9bc
- SHA512 8749cc7cf94f58fa65b2ac2e7968b0839f4d4f17f50cc7f9069bbb66dfc9bb4e6b0d893b46c6c2cd5a8b7f46fbe08613694016c9002b8c7035eca45e11b08d56
- SSDEEP 12288:C0zy5Ph9C0449wQzk4dT/nvSpojPa57ylLroMw413xyMF0JAc2oEMYtWsiuJeueS:2hN4V95Etz718GL/5
- TLSH
  T12B35F602123DE473C0F25E95F58A19225F8A212C4B6378FDD8FDC996D29284EDBF4B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  Settings/dxcompiler.dll
- Size 19.5MB
- SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
- MD5 ef254abdb4599bf754222ab6894ba6bc
- SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
- SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
- SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
- TLSH
  T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Settings/mspdf.dll
- Size 18.4MB
- SHA256 44d2c0f7ed940a323c25d06bf7afc3afa488ed8fff09bec109258296ed84fcfa
- MD5 925d01da4b5aa81778a3e9d84394e794
- SHA1 7405341d10fef12873262919928653c4a4af433e
- SHA512 12d626c04cdeed8287809151276ce2e4d0f9fde16678b104c17ebbaed4ee40cb3d578c21752d246c1cf2a0c68044e8c5763de983a7f2aea849aee41e711d2e88
- SSDEEP 98304:GK20/CdTySbSI8/tkyTQQv/45Ok16RMBQjhWOvPy/UO0JV6xEnwjql1UntpC4X0B:GOTTQQv/45OkMK/7Y6x9bXC
- TLSH
  T1A5176D06BB9A49EDC04CC874934B86535E20B8CB0B75E5EF45C962192F7ABF85F3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  data/defaults/info_6.dll
- Size 645KB
- SHA256 da439e4984cf44b48491854f81f6219f2e1ccc29c39ffd98e77e6187fe4c4723
- MD5 aa34361c6a3ead75b408750c85434105
- SHA1 43868bdd830ce5c8ad9d36fd8bea4b25ec1dbd41
- SHA512 94a31f7ff1020beb746b71d5dec258f977fde4259524c92e9beb52196a0c4caac2ba35b911956459e937e6544fe272113c769c3cd66e2ee0e5cae924ada890b6
- SSDEEP 12288:e8EUyGkBupyPfDYN31m6SxT26B13Et95CFZC7hWc9Q45DI6Hiu/G:e8EUNxMUN31KxS6B13Et9GZCNBIZ/
- TLSH
  T13DE43352F617B9838D27C48387838432ECF9F9A6864929B61CB345B5E1AF742F5F3520
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  data/defaults/module_74.dll
- Size 547KB
- SHA256 e02958df21dea0f16700dd521f7a572db420971db830bd41bb142f5ab6fbe81f
- MD5 a506e077e5c3ecc89849780b268d6948
- SHA1 6ca72544535eb32dd8710f52aefbdec40ce5e5e5
- SHA512 0daa67fa43bcb178d448c3d02a5e6c91f352e7d5befacb60db67a92c6a32017f40b0b8d562e06bb7696731fc3807b9f267d3244844763a325e68ad907f437529
- SSDEEP 12288:plzj8C7SVa7WrtEfinEakLjAByf9zl/cvhkvRxPEym4zZ1U1tVUnO:Tj8fVa6rvnEaMjmyVMhkvTPJmnUO
- TLSH
  T169C42306FEFB1E59653F57812D19CA75F8930E509B9748A2CAF00D979D30372C80DAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  data/defaults/settings_12.dll
- Size 744KB
- SHA256 0b57b36b95cb4f1f60afd6b8ccfa81809dd6623de85290631e64f14f8762a841
- MD5 10670d4cadd6d4830bc3e46aa6a2762b
- SHA1 85930d5a11d6164b5e7c3edc735ef5788142d845
- SHA512 ece8656821e6e4feb6b592ddd0742b6353893ea17cb721daa6c65a7f1c3365d9cc3923cac65294a19755f8da1810244095c3d897d20bf2b5526fd53e3c498c90
- SSDEEP 12288:0iaj1Quur+TEqQNcjxt0Pjaea5uaVeWscJvf2nb1AMvwybX0kCK5MVvOHLC7F/ip:VaRQZ+qcjxt0PjfaMaVFf6+QBh2VvOHh
- TLSH
  T163F42368C6DDC0097A613EAA68DFCB188963CDF0B22567B1F414C2B46831EA9BDF44D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  data/defaults/user/Settings/dxcompiler.dll
- Size 19.5MB
- SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
- MD5 ef254abdb4599bf754222ab6894ba6bc
- SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
- SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
- SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
- TLSH
  T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  data/defaults/user/Settings/include/dxcompiler.dll
- Size 19.5MB
- SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
- MD5 ef254abdb4599bf754222ab6894ba6bc
- SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
- SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
- SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
- TLSH
  T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  data/defaults/user/Settings/include/gmpxx.h
- Size 126KB
- SHA256 0011ae411a0bc1030e07d968b32fdc1343f5ac2a17b7d28f493e7976dde2ac82
- MD5 ea3d21de4bcf7c696799c5c55dd3655b
- SHA1 3e020a13e5ff85d6214ad56ac07395f53efa50d2
- SHA512 5c102c423d0147cc7bfdb4a5fce6863605969cd3a2d914c8485b5db60d33f6efef4729cce6c63d57f81627dbd50e83438c8ab54fb525d119fe02d922ce540d97
- SSDEEP 1536:ljLJi+vitB4/K8YKwUWyomDIgBxf4zj9f8LaqDyOp0e2j4DO4KV4/KX4YKztWcZk:l2xmWxg/M8OVFi2Qm
- TLSH
  T12DC32079208AFC919A93C031D263C5A5F650474133E8CD98B81E2678DFE3C56C7AEAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  data/defaults/user/Settings/include/mspdf.dll
- Size 18.4MB
- SHA256 44d2c0f7ed940a323c25d06bf7afc3afa488ed8fff09bec109258296ed84fcfa
- MD5 925d01da4b5aa81778a3e9d84394e794
- SHA1 7405341d10fef12873262919928653c4a4af433e
- SHA512 12d626c04cdeed8287809151276ce2e4d0f9fde16678b104c17ebbaed4ee40cb3d578c21752d246c1cf2a0c68044e8c5763de983a7f2aea849aee41e711d2e88
- SSDEEP 98304:GK20/CdTySbSI8/tkyTQQv/45Ok16RMBQjhWOvPy/UO0JV6xEnwjql1UntpC4X0B:GOTTQQv/45OkMK/7Y6x9bXC
- TLSH
  T1A5176D06BB9A49EDC04CC874934B86535E20B8CB0B75E5EF45C962192F7ABF85F3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  data/defaults/user/Settings/lib/x64/libEGL.dll
- Size 360KB
- SHA256 fbbe65fb7725e6fde8c381c59d170bff153b87fdf99f531d46dcfd2c1e237f98
- MD5 a1cd233bdfb48de54e18a074caad1f5c
- SHA1 dced789ffa957951389482aa03c3da272bde114a
- SHA512 22b7a5c4dae5d5220cf2179201c88371d0d24de3a4fdb709381059548bc238e892423f8dd2d3837706de6b554551651aed956526e8f69a89ddc1088974f8d164
- SSDEEP 6144:y8BSlAEZQH65WlPum8AW7elHtE+pGMYgZwlxE:y8BEjQH0/m8AW7extsB3E
- TLSH
  T157749E40B5C0C072D46E25353A28D37C4ABDAD621F6959CB93B84DFD6F702C26A3726B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  data/defaults/user/Settings/lib/x64/libaccess_concat_plugin.dll
- Size 45KB
- SHA256 f28831b08aa6969c91f282668cd7fd02311e83a001fd31ad7ac6f1fe49fccdbc
- MD5 486b252a5b4f4c60b70ebba8dc7cbaa3
- SHA1 30e45ff8cfb6d34d6462a11373714c1668083156
- SHA512 5963c7834c6dc17ac1d432564bf4c80b9c0a011de5aaf891933b9594a275763e93c8b1e1ef280ebaa8580c7ce07ab69f46bcc4d60aa8f096aa66e4ef7438ad7b
- SSDEEP 768:7cLsu3hSEwFxXiVdEVOxY/ANxXiVdEVOxJu:oLseDw7yVTxIAjyVTxI
- TLSH
  T110237E679350AC58C91FC571B5ED8737A671B9571A61CAAA0328C2300FA0B85BBFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  data/defaults/user/Settings/lib/x64/libattachment_plugin.dll
- Size 43KB
- SHA256 37cf9f70a31fa6231e163348aeda9bbfc1eb8bd10efc4a5ca62cae568cbcdaea
- MD5 021917923bb4eba130526a89030c596d
- SHA1 cc8cd0413fb4da4a86944c085fc895f6654d3434
- SHA512 34f8759d6960cc805e38be749b83cafaf5fd27b4ad3f0e25b23742aac9c85e56bdf76deba59e1277651b65dcf5d07084c152d8e8bc150ebb5c0d5853d536591f
- SSDEEP 768:CW2Exuqnbs7wYxXiVdEVOx6ubhxXiVdEVOxtr3y:KEx9kwqyVTxJbvyVTxM
- TLSH
  T167137E67A650AC48C91FC57075EA8A3AAD75B9131EB1C7DB0364D2204FA0B81BBFD17C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  data/defaults/user/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar
- Size 68KB
- SHA256 f6c9188634b521b08abb1ea530ab94d222a52f67fa59ca829136422931c1b213
- MD5 22ab31ce5bba1cd7069515e5d9c0d7d2
- SHA1 85dc9099235470cf2ed9b9dd559e6965d8612b17
- SHA512 55baa09d3a04dc72e43cf24ff5d84396e0d3af6f6a55b045e250a52d6fcb10f4c549570b96a57e6ff1247cdcbbd19e2ec35f4dd35e7c6649c84bb9c533fba524
- SSDEEP 1536:NXtczIvxI2imckaqmB+BOY8AujaARNkwCqZ4bwUWiz3t0m6g7Up:xtbI2sBnYwj5RNtbabSKt0mKp
- TLSH
  T1BF63E13218B82077DB5FC173D09606C1351E25F498872D262DE9AED376BADBFCB06520
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  data/defaults/user/Settings/lib/x64/libbluray-j2se-1.3.2.jar
- Size 752KB
- SHA256 75fd105e4581290801866538270a9e7badeb5a6b9fba7d00b14b8312123c2d22
- MD5 9d76776c432194bb8ae70922eab1feca
- SHA1 5c4df6fdf208dea9d0bb9f7a4f418477981b4131
- SHA512 3b777731409ad23a2950081e7b8a87a53fe070e926ab2c1624669a85be41b95a238165f5d174e77f4c137418797f72fab45f3aee373c4ee177dda56fea896e0b
- SSDEEP 12288:gZ8S4ERL9jxTjxOL6uz9BoaItnvcKSClnb5yelW0lZ/hy+3njEz1Mk:gZ87Ej1xO1A3VvcKSeb5ycWqd0+3mMk
- TLSH
  T138F4CE72E1C42931F5638177A6E38423382E04DDEA867D13A8F66AD7E472C5AEF03715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  data/defaults/user/Settings/lib/x64/libcdda_plugin.dll
- Size 810KB
- SHA256 7a7d2c190907053f17ce7cdfad9d689cb6bcbcaa9e1e5d55f1071db137ef4e2f
- MD5 28087f663eb9e5516cb788ffed7c6ea7
- SHA1 f6d1b224d443e7064105b7196ae06033dc09ce19
- SHA512 4ec25c5085e547f6751a539df919b2927bb9143283c967be472219e68f9a2e3f0babc8ed27f4620c5184ff630b0446fef91cc6b75c0ef11f3d9d2be6a57ceb87
- SSDEEP 12288:6Vnl/u0/J8DPk9PX7OzfCHhINhaGvuy/12YK5sqcXYobT:6Vhu0KDPk9PKTshIWURRMUT
- TLSH
  T1AB056B5BE6A314ECC26BC13443976733B472F86612707EBF16A4D6303E12E605B6E7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  data/defaults/user/Settings/lib/x64/libdvdnav_plugin.dll
- Size 230KB
- SHA256 e15f2c49db514f7e7f9d51866dfd249c739832c465185c777e0955249c9639cf
- MD5 4a5303dbb632f580a56627d83214227b
- SHA1 4344c6f6d6687bf5c7fd480275c9a4b2a52fcd26
- SHA512 335b8eddaedc57542afde15282e316eb63b22f0e07c68fa644239747aeef0d5d1bf4bad227405dcaff604d9ee61b4b33a217d17ea69e2be200d13518340b0ee4
- SSDEEP 3072:IC7jGpglaVh/Y1D6FgU9GzywQFJmFgH0mVeOurFCoTGrDTnqqqGR:LSg6mefGFomg0geVrFLkXR
- TLSH
  T190344B56B1922CECCA2BC1308397E632F972B8560230FD7E1B64C7751F15E216B6E96C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  data/defaults/user/Settings/lib/x64/libdvdread_plugin.dll
- Size 164KB
- SHA256 cfb94e3e21ae82f05cf85e9f8be9ee012f6b7baa084c0ecca8c30310442959ef
- MD5 39d641807eab8c8e40d7eccf30960b4e
- SHA1 28413be490300791eb2d340a05b12e1ac2d1d24f
- SHA512 a8740bd4306e6ed495288b8af2fdc668dcfb3cb122d4e67cd79945a4045a4fc07740e7f8f0cf22698564bd2f28513d70d121dfa66fc2944b6b58f19a6ebfd208
- SSDEEP 3072:Bc25hZLo008Zo6BpLFLyfo+thjCpTZqdqsY:qUt0ibL0fZ/jWwY
- TLSH
  T105F34B16F15268ECDA2BC23057A7EA32F97178960330BE7D5B64C3741F25A2077AD86C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  data/defaults/user/Settings/lib/x64/libhttps_plugin.dll
- Size 154KB
- SHA256 28f15014417c43e316af562b5809a54238a2b333fd048f83827d11c8518d08ba
- MD5 a5d6bd737c9aedac80d6a61a67e2e641
- SHA1 bab498a913367e99dbadc6e4065dc68703cc8ca3
- SHA512 6e1588d801f8dc233dd730684989b69f3bcd9be5797ab94baacddbf0e48e48238ad5cc74c993aa2fc030607111924621a113afdde87ac66b9fa213d975ca9392
- SSDEEP 3072:cjr8WMnJhvs/de6D8eaN7FlNic7bGXzMSl218JHdxCqkqqi:YQvJhvCdeQEFFlj/GjMl18JHDC8
- TLSH
  T14BF34C67E29254FDC65BC13456EA9736F831B8220730EEAE4774D6312E10F507B9E728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32