Mtx.zip
- SHA256 10beee5949a16ecf227271072b100a284572986c88dcfb97b3d4a731168fa2fe
Overview
overview
8Static
static
3Mtx.zip
windows10-2004-x64
1Mtx.zip
windows11-ltsc_2024-x64
1Mtx/.tos_accepted
windows10-2004-x64
3Mtx/.tos_accepted
windows11-ltsc_2024-x64
3Mtx/_license.dat
windows10-2004-x64
3Mtx/_license.dat
windows11-ltsc_2024-x64
3Mtx/config/ED_DH.mcf
windows10-2004-x64
3Mtx/config/ED_DH.mcf
windows11-ltsc_2024-x64
3Mtx/oldui.exe
windows10-2004-x64
8Mtx/oldui.exe
windows11-ltsc_2024-x64
8Mtx/version.dat
windows10-2004-x64
3Mtx/version.dat
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Mtx.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
Mtx.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
Mtx/.tos_accepted
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral4
Sample
Mtx/.tos_accepted
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
Behavioral task
behavioral5
Sample
Mtx/_license.dat
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral6
Sample
Mtx/_license.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
Behavioral task
behavioral7
Sample
Mtx/config/ED_DH.mcf
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral8
Sample
Mtx/config/ED_DH.mcf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
Behavioral task
behavioral9
Sample
Mtx/oldui.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral10
Sample
Mtx/oldui.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral11
Sample
Mtx/version.dat
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
300 seconds
Behavioral task
behavioral12
Sample
Mtx/version.dat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
300 seconds
General
- Target Mtx.zip
- Size 13.5MB
- Sample260716-s5w2msct7x
- SHA256 10beee5949a16ecf227271072b100a284572986c88dcfb97b3d4a731168fa2fe
- MD5 7baee6f897cad8e2e8eb93af76fb96d2
- SHA1 d6d6a5f8f7be64b36806ffb10fc4da9278514b4d
- SHA512 99930417bfb492126371ab3260c4168313ffe4647fdaaaf8dc2cdc1a1945c0c65580fce7a26f0df6a352e5c91da4d68e8dec04b9859169db4201d0eb81b5bb3b
- SSDEEP 393216:djqGLm0OBV8vfku64v1LP+248Tid5z3+2ckVsaVKNK:dGGLm0OQvfkX4v1LPX48TK3saV3
- TLSH T10DE63383A17B7F1E7860A135A81B784C538A94B8BB48445CBE67DDCE320E7E34FA1157
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Mtx/oldui.exe
File Explorer
-
Mtx.zip.zip 13.5MB
-
Mtx/.tos_accepted1B
-
Mtx/_license.dat48B
-
Mtx/config/ED_DH.mcf384B
-
Mtx/oldui.exe.exe 103KB
-
Mtx/version.dat15.4MB
Mtx/.tos_accepted
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
Mtx/_license.dat
- SHA256 a6be4c732889d52f596f2ab2ae41359332ed195729eebe5af8f80700e7c9f1d6
- MD5 53c8e325ca90c1b97d9e19737d2dc3d1
- SHA1 06a28e59ab836fa09d0eaebbe39c591e3ec5b580
- SHA512 2afb0e50fdd952a502f08efbd86dbb83d9c638a420b3f50e8373edeb6823deef9743d5041af378f6740d71ae0686d08ff32b4abe59d509cbaf6bbc9a4fcd6363
- MD5 SHA1 SHA512
Mtx/config/ED_DH.mcf
- SHA256 9e74d9df0cedba31f4f565e19b5759194be60272b87ac6638f56ccf71e97aec7
- MD5 5559014071f31eb35efa051f059e5102
- SHA1 4d8645f76ad0f5d9651d0fda187e6601384ab8e2
- SHA512 b1fbe59393266e6446b55a9a488809b3f31b3d82c7fb1a32ba69f2e6738b1d8ddea81040a163c0241423cba6ab269954ac965c55a94408832347fdb43caf26bf
- TLSH T196E08C2603113016C134233602AF2FFED139C85119E403338A64882CDCC429C8C04222
- MD5 SHA1 SHA512 TLSH
Mtx/oldui.exe
- IMPHASH c4badf11c29f0c30d8ce21deb255bf14
- SHA256 813642578d6b2a2d7d2f6ea4ae3bb09378b4652125a582918fa646f86d1324a1
- MD5 9ccb71b71cdd8b16e894f6fe387b66c8
- SHA1 fc4135e821cba663a8c2853df921d17a5e43fe37
- SHA512 037a6e42468da1d1dc408b3a723ad64d780b3f361cdf83916d8df3ce185404b1ecfe89c8962f1c08a1c85a7c15b4d7c08ccfc036b60215448a5fc1a2041d30f1
- SSDEEP 3072:Xzd35JNyPJnRQSLAtHaV05Feg9bbOIOby7Qigq8:d53/gq
- TLSH T17CA373013C4001EAEC77963C8B9D57CDD7ECBB08639496AFABCD505411719AA2DFAE23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
85568
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
ws2_32
inet_addr
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
__C_specific_handler
__std_exception_destroy
__current_exception
__std_terminate
memchr
memcmp
memcpy
__current_exception_context
__std_exception_copy
memset
memmove
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_cexit
terminate
_c_exit
_register_onexit_function
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_initialize_onexit_table
_errno
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_exit
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
Name
.text
Size
83KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=33808,
count=10, id=260, version=33808,
count=25, id=261, version=33808,
count=7, id=257, version=33808,
count=4, id=257, version=33138,
count=66, id=1, productName=Unmarked objects,
count=11, id=265, version=34120,
count=1, id=259, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
Mtx/version.dat
- SHA256 324a2bfe12457108f5f11a047fefa691f32bd21ca491962e35ff83c953cfbd0a
- MD5 5c93b76a9bb16c68f7453316c772ecf2
- SHA1 6aca9120281ac4f22db92ed9a21b5c48abd418c3
- SHA512 e3fa195e2a68769a5994d5e903467068316b1bafaeb4ca592a124e436945726d0046c85edc5e45e0527bd77a709557686bbf4aa389ba78db08b9aee97c4bef8e
- SSDEEP 393216:mdHR5sx25uuR9GTM2l64FyXdAzB3D+KEvRljJOsWYiRnl+fxbI3oVAyYgV8KkThk:yWYiRl+fxbI3o+KV8F1kR
- TLSH T177F622579FBEB80914243ACBBB579E7E3806EE3045E5838451B1956EE39CE81037AF31
- MD5 SHA1 SHA512 SSDEEP TLSH