kyanite.zip
- SHA256 19c9f32d4fa3b896526898420dc056cbea3273466885137bafc89fa26c2f8e81
Overview
overview
7Static
static
5kyanite.zip
windows10-2004-x64
1kyanite.zip
windows10-ltsc_2021-x64
1kyanite.zip
windows11-21h2-x64
1main/README.txt
windows10-2004-x64
1main/README.txt
windows10-ltsc_2021-x64
1main/README.txt
windows11-21h2-x64
3main/assets/icon.ico
windows10-2004-x64
3main/assets/icon.ico
windows10-ltsc_2021-x64
3main/assets/icon.ico
windows11-21h2-x64
3main/loader.exe
windows10-2004-x64
7main/loader.exe
windows10-ltsc_2021-x64
7main/loader.exe
windows11-21h2-x64
7Behavioral task
behavioral1
Sample
kyanite.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
kyanite.zip
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
kyanite.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
main/README.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
main/README.txt
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
main/README.txt
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
main/assets/icon.ico
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
main/assets/icon.ico
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
main/assets/icon.ico
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
main/loader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral11
Sample
main/loader.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
6 signatures
150 seconds
Behavioral task
behavioral12
Sample
main/loader.exe
Resource
win11-20260513-en
windows11-21h2-x64
7 signatures
150 seconds
General
- Target kyanite.zip
- Size 811KB
- Sample260705-bcv57sfx7t
- SHA256 19c9f32d4fa3b896526898420dc056cbea3273466885137bafc89fa26c2f8e81
- MD5 531506a0ec15445238f9c38a5e1cfd39
- SHA1 2a6b341e5b055742e951a88014dbaf59e4c1d6ff
- SHA512 5e5a48cb0c3946f2708fe4553722827c59642f623323377bce6c7cab1f35a107b688b93483899635c59acbfbacc5a55c9fe53c194506c63c6ab2c7e1e788639d
- SSDEEP 24576:JMmVXtD1FZR+idQ40mSsZ2FCvR6obdfPIAYjTeD:JMmFt9R+OQ4pSsQFCvR6o2AyTM
- TLSH T1A70523B49844B860C54CBA7CB0CDA1FE002E5127279ED718F1B776387A0649FDFA629D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/main/loader.exe upx - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/main/loader.exe
File Explorer
-
kyanite.zip.zip 811KB
-
main/README.txt3KB
-
main/assets/icon.ico4KB
-
main/loader.exe.exe 823KB
main/README.txt
- SHA256 e64dba1856e629a5fc8ce74e1545f2cb0b825c35216490a90a59256f7934361e
- MD5 ac5095569cd116dce2339a9e2b897769
- SHA1 3457cc94a49632ca05988310a71190b2e9841e8c
- SHA512 304b9c02d27d2ad6c7ff99313cdc8d3ba7bccf4fa773f81417af2916c19123a415492ab673dca7b0a4f2e99d68aafd403f3c22c4150925224957c9a3ff0324e4
- TLSH T1206168747CEB7B274B82C4436904E66EE74A02D39DF91102F8CC1648FB289B1724C2E6
- MD5 SHA1 SHA512 TLSH
main/assets/icon.ico
- SHA256 20779eaa7ebf09eda0de4b51fcc364b3c597d3b951d5cb7aa41757bb2b23d129
- MD5 6d54b926b8d416cfb4332449ebadbbcd
- SHA1 0cba3f763be62ac5b30399f098018fd321c25c00
- SHA512 df75397f56e6203e4aed847dfa34c7cbd7ed5937798dea4eaeb9b684ed3c162f4d4645a58d1f792293ea55f4fa7b094df40ad1c635310d3917066f59b99fde18
- SSDEEP 48:daxAAAAAAAAAAmWJ++qA075+av7IelAw6NaJm4PJhQd9b69Un3oJbzyPrHTyjvha:daP10FXT4GU37TAheXo4zB
- TLSH T12691830098AEE5D9F4895F30AD22A292911CEE74C33D046F75B337429AFB4E23564D8F
- MD5 SHA1 SHA512 SSDEEP TLSH
main/loader.exe
- SHA256 02cfda0c416d8c0a396f5ab5107ccc3278d324990581268cf4d4bc938d38ef9a
- MD5 b6527ccc6f6a327316918adca2de6160
- SHA1 90f4f96588de7003574ccf2de7fda723d4e5d4aa
- SHA512 be6561aa25ef4d8ab77066ec0b5858b3b6e3aa686f814e65ae1b90386b589323a9f95692898d3fa722f546c6059c6d7574b8fd1b743313f7a29cb0b40f1911fb
- SSDEEP 24576:IUgnnPLr1/RUiDwYm42Udi9CNho07ptdUACjPwr:IUgnP1RUawYX2Uk9CNho0GAQP
- TLSH T1610523A4990CAEF0D3D47CF5A0C9A1FB00599D23335D8609F1ABB57D3A3709BEB52285
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
3003184
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
UPX0
Size
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
800KB
Virtual Size
800KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
22KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=53, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=143, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=467, id=1, productName=Unmarked objects,
count=23, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=43, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,