General
- Target kd2.exe
- Size 212KB
- Sample261113-ctg6caft3k
- SHA256 a1b211c939a5257857fae53faeea22377efe3e73e46f3802f84fe7e71768c642
- MD5 48ba516f37126c3afe8c6b9a4d39e09a
- SHA1 28b3c4e6ffddb7f34f08a8b74a72c9ce525b6202
- SHA512 7b1808fcbf0006a53cd421093e980fbdbefa2d0c9c9e44d06337c5ba4640eaaca8e786e9bdc15d49040f4d66d0017c8bf122efba11eaec691fe96c94716244a7
- SSDEEP 3072:RCJFTyAhWYsdQVTjbH/YBeADa40mJTQSaMm5/6HOMcKm:RzKVgMLH/YBTa4PWlozcK
- TLSH T1DA244B2A58172E36CAD19DBD853A0283F762B84E1B70D5F7B3E844F41917ADC6739A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kd2.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
kd2.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target kd2.exe
- Size 212KB
- SHA256 a1b211c939a5257857fae53faeea22377efe3e73e46f3802f84fe7e71768c642
- MD5 48ba516f37126c3afe8c6b9a4d39e09a
- SHA1 28b3c4e6ffddb7f34f08a8b74a72c9ce525b6202
- SHA512 7b1808fcbf0006a53cd421093e980fbdbefa2d0c9c9e44d06337c5ba4640eaaca8e786e9bdc15d49040f4d66d0017c8bf122efba11eaec691fe96c94716244a7
- SSDEEP 3072:RCJFTyAhWYsdQVTjbH/YBeADa40mJTQSaMm5/6HOMcKm:RzKVgMLH/YBTa4PWlozcK
- TLSH T1DA244B2A58172E36CAD19DBD853A0283F762B84E1B70D5F7B3E844F41917ADC6739A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1