General
- Target Meyy Rejoin Tool.exe
- Size 28.3MB
- Sample260803-pcc7aaam9y
- SHA256 1bc622b57344a3bc1662bf0e8766d98f348ec1c78a7422a9f52f33d520c56760
- MD5 f545e6a7d2a5b27efcf0a3f70441cac1
- SHA1 b236bf95ac0814ca9aa05f66c1ec07a27b3628b4
- SHA512 eb68212764dae998cb289ca9812caab2ff470341401fdea5691d42610e0663b1fefb0f891d05ed8436caaad420c7f7b33f723ae638b6b6d8cbac1900a4097d9d
- SSDEEP 786432:f2G4TLcNOCXJgr/yAlLVUtZq5slzwcu7SYgodmF:kTIAC5gr6AlLVUDq5s1wHModmF
- TLSH T197573384B3C11959EC87123E6AE2CA6153F1F5302F148DCF2BA64769ADF32D8583D366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Meyy Rejoin Tool.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Meyy Rejoin Tool.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Meyy Rejoin Tool.exe
- Size 28.3MB
- SHA256 1bc622b57344a3bc1662bf0e8766d98f348ec1c78a7422a9f52f33d520c56760
- MD5 f545e6a7d2a5b27efcf0a3f70441cac1
- SHA1 b236bf95ac0814ca9aa05f66c1ec07a27b3628b4
- SHA512 eb68212764dae998cb289ca9812caab2ff470341401fdea5691d42610e0663b1fefb0f891d05ed8436caaad420c7f7b33f723ae638b6b6d8cbac1900a4097d9d
- SSDEEP 786432:f2G4TLcNOCXJgr/yAlLVUtZq5slzwcu7SYgodmF:kTIAC5gr6AlLVUDq5s1wHModmF
- TLSH T197573384B3C11959EC87123E6AE2CA6153F1F5302F148DCF2BA64769ADF32D8583D366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target main.pyc
- Size 1KB
- SHA256 5c8f9241e595135d8b5298658a4f265cdf091cc533b2cba4bdc07452cc79a136
- MD5 fed3df418b6fda1e147b01e53032d3d3
- SHA1 bcca96565f69e2234f460df215f890968084e8f9
- SHA512 8ccd790f520a75141b10106c1b0ce3dc00f7bdfb76dc14ea672c3709f1ad9daf8a8f2953158ea0883c1707173bc9ebae83878bd2ad633ff833115b7c4dcfaac0
- TLSH T1BB212562A2D12595C64C0CBEB1C396687257D45169A27253F709C05F0EDB904F6F760B
- MD5 SHA1 SHA512 TLSH
Score3/10