Resubmissions

04/11/2025, 16:07

251104-tknp7scw3d10

14/10/2025, 09:58

251014-lzy6gsytgv9

General

  • Target
    Calveroth.exe
  • Size 67.5MB
  • Sample251104-tknp7scw3d
  • SHA256 a3fcd7593ce1627b198f88c45336d5d796668b0d5bab0a8f0f6a582aa931ca81
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      Calveroth.exe
    • Size 67.5MB
    • SHA256 a3fcd7593ce1627b198f88c45336d5d796668b0d5bab0a8f0f6a582aa931ca81
    • MD5 SHA1 SHA512 SSDEEP
    • Detects MythStealer Java payload

    • MythStealer

      MythStealer is an infostealer written in Rust and operating since December 2024.

    • Myth_stealer family

    • Enumerates VirtualBox DLL files

    • Looks for VirtualBox drivers on disk

    • Looks for VirtualBox executables on disk

    • Looks for VMWare drivers on disk

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks