17ee7ff7360e2063e0afacad838accc9547091b354b51248e04b42050f011b9f

Resubmissions

25/06/2026, 22:44

260625-2n3yasgs7n3

25/06/2026, 22:37

260625-2jx69ags4r6

25/06/2026, 22:31

260625-2fc2xags3q8

25/06/2026, 22:10

260625-13e94sfv8w8

Sharing

Copy URL Twitter E-mail

General

Target
82259c-MenyooSP.zip
Size 5.9MB
Sample260625-2fc2xags3q
SHA256 17ee7ff7360e2063e0afacad838accc9547091b354b51248e04b42050f011b9f
MD5 b71048530a49499e66fc7332a612f65d
SHA1 d016673fda7c52d4494ce52c943759994436502a
SHA512 dc8e995d3d7a4229ee623743a67b738981beb3cfdc8bb20f3c1c16e3ffb6a56beef7febf51713fd23fc1d8640d15ffd5efbd0b5fdde1556da0dc221ca70a65dc
SSDEEP 98304:p6VCL5d/guJSkZsJ9BKmxWOLHyXtM53znRuaKnYE8wQr25EZ9OkhCq/:pQCL5dkkZyBpWOLN3Vu66GZ9Okh/
TLSH
T1AA563345D9DE74C6BDA1B07208383E5EE6D3E34F90C723275069AF82CA9270C9FC6965
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  82259c-MenyooSP.zip
- Size 5.9MB
- SHA256 17ee7ff7360e2063e0afacad838accc9547091b354b51248e04b42050f011b9f
- MD5 b71048530a49499e66fc7332a612f65d
- SHA1 d016673fda7c52d4494ce52c943759994436502a
- SHA512 dc8e995d3d7a4229ee623743a67b738981beb3cfdc8bb20f3c1c16e3ffb6a56beef7febf51713fd23fc1d8640d15ffd5efbd0b5fdde1556da0dc221ca70a65dc
- SSDEEP 98304:p6VCL5d/guJSkZsJ9BKmxWOLHyXtM53znRuaKnYE8wQr25EZ9OkhCq/:pQCL5dkkZyBpWOLN3Vu66GZ9Okh/
- TLSH
  T1AA563345D9DE74C6BDA1B07208383E5EE6D3E34F90C723275069AF82CA9270C9FC6965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery persistence
behavioral1 behavioral2
- Target
  License.txt
- Size 711B
- SHA256 e9a693ed6e331b0fea3e50377b7e5fc05ec0aa2b649b65ee825afe412a008bd7
- MD5 9f196d9446642fc36a3c8fbf30419ffd
- SHA1 724ba8c03fad3ccd75340342cefbe6011da02a98
- SHA512 de460f9edfbb2889c1e42b4503560552763f938d9f98d35e0eb441842dc90da3b57d16cd2efb7a5ad9899fe180665d3360c7c53b53513da3a751e566fcdf393e
- TLSH
  T17B01DC0E6466CBBA8C4013C53943D0DFF22B9AD376DE04A0250A934FC50AA7618E24E8
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Menyoo.asi
- Size 4.0MB
- SHA256 294db86eb6e891e8a3d0a1a5dc4a7df5e7faa8f1fa9ad1bae7b7b8a886a4cdf5
- MD5 2ed5f213700934f9405a8f1b7343a761
- SHA1 f82815c2d9cb91420531f638b563324a0671ab25
- SHA512 4dc8870a4e35765bea9eeae0111b7ea479fdfd922b264bfacfb65ab9a2405e61b3051ce21baab1bc588e3f5a8b349cf0626995468d1f6d64f01090ed1a23244d
- SSDEEP 49152:3V3wSPQoXhQrmVCsH4yRdg/I3wxQmwT93qV6bCSX/D8Yy4MzUXtLvON7q8bSe:jYjwkSX76AXy7q
- TLSH
  T1EF163A7DB85D0079E061D0BFDE87A906C572305A133259F709928FE28D2B7F5867AF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Readme.txt
- Size 1KB
- SHA256 b643c68bfb522ac5f7ad9dffde5a46e5307182dc8a57c19c1d3eb249b4b8f15c
- MD5 20f1541563fc9fb94648bafb1630e896
- SHA1 1c690e39fef1bad7c1689f44b83767a13721ebf5
- SHA512 a48b803a54167266b4516cedbd1343803f28a3f437d63017cb1a752c6e87a0c7a6f8a1f300a433ce8f32bbc6056ece945bb6e63df75f16eb12fd599dd366df40
- TLSH
  T1B741963F166F61310FB091A9B37C8999B306404DE39D996B153082BC3A593BC6F6F1D8
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  menyooStuff/AnimalRidingData.xml
- Size 595B
- SHA256 c1800722417ebafcb6e21c21d3a3dbe3ca6f260807212de6bf0d3627df05942d
- MD5 dca10e64bb17d99b17165b0cc6a4c478
- SHA1 6ad89a14d60c26d142b65584d69fb1cf5c9b7817
- SHA512 f2a398d6539b4823329d709c83d6596ccd40624aa0016b61bf9b8bce53040cc970c7cdd93cf8a3c57fb7d62ac4944affc2d4f4b9fe6fa94a43238eeae698c69a
- TLSH
  T158F06D2086E35E618AB38A2876A9C2CCEF6CC3CB0C451114F54EAF2B4F770290247556
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  menyooStuff/Audio/Audio.readme.txt
- Size 97B
- SHA256 f065737761788a67d083e02ced2b0d0b17ae21ae2630da995c84cd72b411c15a
- MD5 903e95bec379bda587d151f12545938f
- SHA1 2e6df5cd641fd50f3baabc742ea809981a3901c5
- SHA512 f09b21042d4eacd98cf82b062aa2813d27a6d4fbfeeb260ae3c80376ffec3cba83b5c8e049da76af885b71f58133a7040fde9c21f5041d8e7029155e6f403ed4
- TLSH
  T18EB0126B38EE3010418532F0275498E83399019F070C1B25B2302130FA0242106C1424
- MD5 SHA1 SHA512 TLSH
Score

8^/10

ransomware adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  menyooStuff/CutsceneLabels.txt
- Size 13KB
- SHA256 4b9cc92243d53f8fc8fad4161212051402673bf5dbe3617512d9d1577ef191c6
- MD5 1484b5ac061e3644dc152340167c2205
- SHA1 39c605d4a3ccbbbcd75eb65657bfba96eb73ed3b
- SHA512 89d4d70381a52ba92828ed630e442b74f2b21d2530aee4d0c31705cccc00b2e8132be72e4379098effa052acac6b7bb45f86cb38a7412e0852efd8cd836b396c
- SSDEEP 192:2YVlrlqIPMjZUTgdxzPJGj241r8PsWmsCD6gHxg/xkfAemw1pgH:5Z/WUTgdxjPe4kfAemDH
- TLSH
  T199529A3ACC9CF84FA0C8ED9423FD0231CA25295606D65C232DB6AD8F4B8E477514EF99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  menyooStuff/Graphics/Clock/Clock.readme.txt
- Size 281B
- SHA256 eefe93fa1abac62273087ef9013a2dd557cf9d5f72fb7a8d84f278abf80a1afc
- MD5 170787205d3b824b413eb6f2c3770b34
- SHA1 9bffa1e0d6dc3ff54f339e2207ba0576219248c6
- SHA512 8dcd541fed8583495beba45c24bdab2fa5527886f2f105bb5907d96bc4b208b9099677ce8663d25935d7bc56a12826bfe54dda8836a7c614517974ad2a372458
- TLSH
  T16DD02B4F5BA49ADE35C970A82BE43A5CC0030B7517E6424815B891C02FD8215AB3B0F8
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral15 behavioral16
- Target
  menyooStuff/Graphics/Clock/Default_face.png
- Size 44KB
- SHA256 38704b357a371cf738d516bdbfc770043b4a48f176a54b7276d3c012272baa1c
- MD5 30b21b4a07e3857aa33a78e905703ca9
- SHA1 40682658c86412325a52b3ec5ae2d0f1f05ad284
- SHA512 8db9db4d9cb1b5a46e1a1c3df61eb21d392826409983e7624457d6248c2c76a3db2bdb55cb434f0822477ed6d65a7a8d7c73e601b442560d724f6b62ec85eb6a
- SSDEEP 768:135onAU1A+L0Z7ezewnQCPABIRemZkzUQc3eZZSg8gFrWjaqVTx:A1A9ZSzZnt1RVZklcYrWjaO1
- TLSH
  T19113F1E69A538092B73ABCB5A40DDC06F3B17F6DCC075EB616E155A9CDC5C2A0F78480
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  menyooStuff/Graphics/Clock/Default_handh.png
- Size 584B
- SHA256 05f29ff2e5647e0fe67b5a0c6f2d180525f5f58a6f2145e7d9fa45d6e6186ab0
- MD5 2f5f44adf1093da7a93144fb0246a437
- SHA1 7876ba5760a63775cc7edb5ccc7046db3de54d6e
- SHA512 80e391121396cf64326418d7904d839373d9204b581fc7da9d508457dd5b7a54d49bd921271356775ee0d8513050681f20df81bc832fe79d3aa2db84a33ed247
- TLSH
  T1E9F086C3D30298BDF56E6931374B17A76463F074C5D7164F411104E54D159051DB8577
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  menyooStuff/Graphics/Clock/Default_handm.png
- Size 590B
- SHA256 1272c7d983d018ba2e46584dce5abae65f0302c9cc49151738efc3e8b38068f4
- MD5 c11e08e2b42d98145b1c2bf1faa73e66
- SHA1 13a65cd3e7a24a01bc43d39e85503f4cc6487d2e
- SHA512 60083e41d9fa4604a55c09214177966c759b88399dc6b4850738db9e1d1c4b7774949540fe7b0d4d35a4d0ea57fee99912b68ff8661d66e1aed8ce020ad4e62b
- TLSH
  T171F08CE3DB2158B5F46D0A31734307A79823F0B514E6420F401140D82C126444DB10B3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  menyooStuff/Graphics/Clock/Frameless_face.png
- Size 17KB
- SHA256 03f1b6b2c71bf8e11190ffcc79706f5ffe815b0f32ce9ce058bceaf82b15f028
- MD5 40ffc2c0ca5f7d6abf4d9e91191b762b
- SHA1 b0fe1a8bc580896e0e954f3170f0bbd4528584c8
- SHA512 b2c1a168b6d287d0870d9f1283a38b53ed02a4db6520f9584e08de379a88495a62614058256dc53f150b6d1553fff9ab065a8ea1eff64e7c4da723e8c344af1a
- SSDEEP 384:QaFkFAPR5aAt9byMNI7IXodDxpXL5fRrgyGA4mOofhw0itXkZ5Uy:QzmBryM3oBH5ZpGvmOX0ixkbUy
- TLSH
  T19F82E183F08B148B39F7325855BE7F2502D313676E5A2A177A2E48E576E2CF306DB114
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  menyooStuff/Graphics/Clock/Frameless_handh.png
- Size 584B
- SHA256 05f29ff2e5647e0fe67b5a0c6f2d180525f5f58a6f2145e7d9fa45d6e6186ab0
- MD5 2f5f44adf1093da7a93144fb0246a437
- SHA1 7876ba5760a63775cc7edb5ccc7046db3de54d6e
- SHA512 80e391121396cf64326418d7904d839373d9204b581fc7da9d508457dd5b7a54d49bd921271356775ee0d8513050681f20df81bc832fe79d3aa2db84a33ed247
- TLSH
  T1E9F086C3D30298BDF56E6931374B17A76463F074C5D7164F411104E54D159051DB8577
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  menyooStuff/Graphics/Clock/Frameless_handm.png
- Size 590B
- SHA256 1272c7d983d018ba2e46584dce5abae65f0302c9cc49151738efc3e8b38068f4
- MD5 c11e08e2b42d98145b1c2bf1faa73e66
- SHA1 13a65cd3e7a24a01bc43d39e85503f4cc6487d2e
- SHA512 60083e41d9fa4604a55c09214177966c759b88399dc6b4850738db9e1d1c4b7774949540fe7b0d4d35a4d0ea57fee99912b68ff8661d66e1aed8ce020ad4e62b
- TLSH
  T171F08CE3DB2158B5F46D0A31734307A79823F0B514E6420F401140D82C126444DB10B3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  menyooStuff/Graphics/Speedo/bg_cyan.png
- Size 34KB
- SHA256 b0d9cc2674cdb8bea1b6974dcc32129e9381c9627d64ae39211785f74548d86f
- MD5 04f5a63a3dd2c912969969803f5d931e
- SHA1 0c2fc6f17c40746ad9bb599d70feee418fded2fb
- SHA512 0ad6e3b63881be30116374c9c037e56e380611dd814fc401f58d629d1fb6eb852acdd00e521ec0c5d65dc11b3a07eb6307852e35126253c76a76fe70e6bb3a80
- SSDEEP 768:gA7nwGHRnnDs4pd9HA/odiE9yVjCY4n260rykHH:gArfHRnwg7HA/odiE9y5CYaCrvH
- TLSH
  T1D2F2F180965C234A3A13D11F40FB8DCDB5ECCAE3651392BC0984AF0D4075B7AD980FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  menyooStuff/Graphics/Speedo/bg_cyan2.png
- Size 33KB
- SHA256 fe418f12ea0686da270a801774890e16afeaeae074d73ca15045c744a4631968
- MD5 f29a37ab833a374c2ad74b09b3d4849a
- SHA1 77eb249b9750071a7f5805c77017980dfe087869
- SHA512 71aaa2efcd51154e01189111c0b93d16bcdf4985233fce0934df59e7b26d675e146f608e0ccd5ec41bbc54180fb6ad6077eb14393e8ad0f6a63f4253e651fbfc
- SSDEEP 768:9j6dwFeg1lJWq/xyWIKNu/dxqjRhXN2fsVENKmHB2UWdhz3bkO:9j6acg1lJWq5yYN3jRdN2fsVnsYzV
- TLSH
  T163E2F15A2A12DD2F1883732CF788565784CAE0FD7C631D5023B15A1F7AA8ACAB5428B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32