General
- Target kyzu reedem code v4.exe
- Size 35.3MB
- Sample260712-g1a3tsft7v
- SHA256 d6b14ea0b81d576542c1a69fe65513b350e86b2d4b22ae173489642021505b6a
- MD5 63ff63e1260e5cbe61ebfc888daeb0df
- SHA1 c3ada96814466e071fdaa74bd80d3060e84ba86d
- SHA512 8e4bc47a8327b4689b53a337bbe20354c16a724cbf7bd4fa8b4750c3e140ce6f9c66d831d2b9a59e9e674bd115679f1c2958efe4520096f3f3b85f548fcae149
- SSDEEP 786432:Qznxv2JLeccep1LXmHZU1XhHHxXOUg14tvrEgzSsMp+Gyj:2ndb21LXmmXhn+LgzLMp+vj
- TLSH T11D87334512E10961F8EFD13869A59BB7F3F275201B31C58B0F644FA829A70EADF35B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
kyzu reedem code v4.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
kyzu_launcher.pyc
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target kyzu reedem code v4.exe
- Size 35.3MB
- SHA256 d6b14ea0b81d576542c1a69fe65513b350e86b2d4b22ae173489642021505b6a
- MD5 63ff63e1260e5cbe61ebfc888daeb0df
- SHA1 c3ada96814466e071fdaa74bd80d3060e84ba86d
- SHA512 8e4bc47a8327b4689b53a337bbe20354c16a724cbf7bd4fa8b4750c3e140ce6f9c66d831d2b9a59e9e674bd115679f1c2958efe4520096f3f3b85f548fcae149
- SSDEEP 786432:Qznxv2JLeccep1LXmHZU1XhHHxXOUg14tvrEgzSsMp+Gyj:2ndb21LXmmXhn+LgzLMp+vj
- TLSH T11D87334512E10961F8EFD13869A59BB7F3F275201B31C58B0F644FA829A70EADF35B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target kyzu_launcher.pyc
- Size 49KB
- SHA256 ee41b009b4f3f7815c43e4e33b6a426b6d3e3e52b8a25d258ab80f8b326729df
- MD5 1b38a6cbd9fcab00b9752abe592e4569
- SHA1 4f9ff9ed6cf349f343704f45751a6e8f69033763
- SHA512 4c795c1e19e32a04f59024b0feb5453b0301a2f874915b6fd56ac9fff4f924425c9c01f8f6441382ddcd3898c9d68d6f1b787490e4cdd005b8f3696230fe69a7
- SSDEEP 384:OkeGp7sijeZXfIBuLoMMe7FfqqJ2jRaRPg/SFZzbF1l9CwVSG4W9hbo6HOfP9A4g:OEPKLxj8qLPFZh/SYjpHiP9iBLMQ
- TLSH T14233C3B4A834752BFEE9FA7532D7A59177364242B200C20BE2389CBD7CD93568D2074E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10