General
- Target mytweak_pc_optimizer.exe
- Size 12.0MB
- Sample260825-apavcs1tht
- SHA256 b25bc15f4c2489582a2345c438a09722b41a6c8806675a3f5e5c5661b96909ab
- MD5 a6b25c8bb52ddf602c779c622fd6a0c0
- SHA1 52a6aab0acba7e366f8be1b0008c05b0b54cce58
- SHA512 31b9f9282f794772604f40bd8834a611469bfe555064371153963c0f9ba58394b731e72c3fa2a5a5a25d9e7c3b316516efbc6e59a20f1cc9cf141a287c263587
- SSDEEP 196608:G+I/RYKXEpXnH2ph1iutexSiLCw10+u41ZPcUNS/gbeHV5PTmCY+g7tysvonYpP2:rI/rXEAphVtk510MjNSoiHVBSC7AysvT
- TLSH T18EC63368BB6051FAE9BB403E8CA79451A6E332160752E3DF2B9005653F271F08D7CBB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
mytweak_pc_optimizer.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
mytweak_pc_optimizer.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
mytweak.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
mytweak.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target mytweak_pc_optimizer.exe
- Size 12.0MB
- SHA256 b25bc15f4c2489582a2345c438a09722b41a6c8806675a3f5e5c5661b96909ab
- MD5 a6b25c8bb52ddf602c779c622fd6a0c0
- SHA1 52a6aab0acba7e366f8be1b0008c05b0b54cce58
- SHA512 31b9f9282f794772604f40bd8834a611469bfe555064371153963c0f9ba58394b731e72c3fa2a5a5a25d9e7c3b316516efbc6e59a20f1cc9cf141a287c263587
- SSDEEP 196608:G+I/RYKXEpXnH2ph1iutexSiLCw10+u41ZPcUNS/gbeHV5PTmCY+g7tysvonYpP2:rI/rXEAphVtk510MjNSoiHVBSC7AysvT
- TLSH T18EC63368BB6051FAE9BB403E8CA79451A6E332160752E3DF2B9005653F271F08D7CBB5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
- Target mytweak.pyc
- Size 161KB
- SHA256 459852de7a59c048be44928b1c6845de0ee896edb0907823b022f24dc02f7c52
- MD5 7455c43eba420b3956768b5f6007b50f
- SHA1 3dda99270ed76441ae0be17ec6653e88d6fdf13a
- SHA512 6fdb61aff145c2ae75d8f0b1c279445f30f0536db580a02575f38a7d42a3e4890acfcec1f8413c1c64fd44073701a0440f177e2c5e84b2f7cee828a055a71b8e
- SSDEEP 1536:eiZy4RBif9Rlydc/kNynDdKTi0pWrls5J+l7+ov8Tqk6:hZy4RBiwEgbYaol7+VK
- TLSH T171F3D7BAAD30300BD6DFB47571C7E8427736524272218227F02D987D7E9A266DB0E61F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10