Overview
overview
5Static
static
5Cythosia B...er.exe
windows10-2004-x64
3Cythosia B...er.exe
windows11-ltsc_2024-x64
3Cythosia B...rs.dll
windows10-2004-x64
1Cythosia B...rs.dll
windows11-ltsc_2024-x64
1Cythosia B...ng.dll
windows10-2004-x64
1Cythosia B...ng.dll
windows11-ltsc_2024-x64
1Cythosia B...86.exe
windows10-2004-x64
3Cythosia B...86.exe
windows11-ltsc_2024-x64
3Cythosia B...er.dll
windows10-2004-x64
1Cythosia B...er.dll
windows11-ltsc_2024-x64
1Cythosia B...gs.dll
windows10-2004-x64
1Cythosia B...gs.dll
windows11-ltsc_2024-x64
1Cythosia B...ng.dll
windows10-2004-x64
1Cythosia B...ng.dll
windows11-ltsc_2024-x64
1Cythosia B...re.dll
windows10-2004-x64
1Cythosia B...re.dll
windows11-ltsc_2024-x64
1Cythosia B...or.dll
windows10-2004-x64
1Cythosia B...or.dll
windows11-ltsc_2024-x64
1Cythosia B...LA.rtf
windows10-2004-x64
1Cythosia B...LA.rtf
windows11-ltsc_2024-x64
1Cythosia B...nt.exe
windows10-2004-x64
1Cythosia B...nt.exe
windows11-ltsc_2024-x64
3Cythosia B...ET.chm
windows10-2004-x64
1Cythosia B...ET.chm
windows11-ltsc_2024-x64
1Cythosia B...ET.exe
windows10-2004-x64
1Cythosia B...ET.exe
windows11-ltsc_2024-x64
1Cythosia B...ib.dll
windows10-2004-x64
1Cythosia B...ib.dll
windows11-ltsc_2024-x64
1Cythosia B...er.dll
windows10-2004-x64
1Cythosia B...er.dll
windows11-ltsc_2024-x64
1Cythosia B...el.dll
windows10-2004-x64
1Cythosia B...el.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/09/2026, 19:13
Behavioral task
behavioral1
Sample
Cythosia Botnet v2/CythBuilder.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Cythosia Botnet v2/CythBuilder.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Cythosia Botnet v2/Eazfuscator/AG.Configuration.SettingsProviders.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Cythosia Botnet v2/Eazfuscator/AG.Configuration.SettingsProviders.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Cythosia Botnet v2/Eazfuscator/AG.Deployment.Updating.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Cythosia Botnet v2/Eazfuscator/AG.Deployment.Updating.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Hosting.x86.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Hosting.x86.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Installer.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Installer.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Settings.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Settings.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Updating.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Updating.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Cythosia Botnet v2/Eazfuscator/Castle.Core.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Cythosia Botnet v2/Eazfuscator/Castle.Core.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Cythosia Botnet v2/Eazfuscator/Castle.Windsor.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Cythosia Botnet v2/Eazfuscator/Castle.Windsor.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Cythosia Botnet v2/Eazfuscator/EULA.rtf
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Cythosia Botnet v2/Eazfuscator/EULA.rtf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Cythosia Botnet v2/Eazfuscator/Eazfuscator.NET Assistant.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Cythosia Botnet v2/Eazfuscator/Eazfuscator.NET Assistant.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Cythosia Botnet v2/Eazfuscator/Eazfuscator.NET.chm
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Cythosia Botnet v2/Eazfuscator/Eazfuscator.NET.chm
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Cythosia Botnet v2/Eazfuscator/Eazfuscator.NET.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Cythosia Botnet v2/Eazfuscator/Eazfuscator.NET.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Cythosia Botnet v2/Eazfuscator/ICSharpCode.SharpZipLib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Cythosia Botnet v2/Eazfuscator/ICSharpCode.SharpZipLib.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
Cythosia Botnet v2/Eazfuscator/Microsoft.Cci.MetadataHelper.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
Cythosia Botnet v2/Eazfuscator/Microsoft.Cci.MetadataHelper.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
Cythosia Botnet v2/Eazfuscator/Microsoft.Cci.MetadataModel.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
Cythosia Botnet v2/Eazfuscator/Microsoft.Cci.MetadataModel.dll
Resource
win11ltsc2024-20260911-en
General
- Target Cythosia Botnet v2/Eazfuscator/AG.Eazfuscator.NET.Hosting.x86.exe
- Size 9KB
- Sample260912-xxe6davycs
- SHA256 2556ad590eeabfb0ff046089b8cc2c3ab528befc72e53f4bbe9cfc3bb5c455d9
- MD5 5e7df16a2bb078c4faf1356ac487a9de
- SHA1 001d866c98b97db2e915630a0e0649c95b56efe7
- SHA512 b0f3a2946e075f44e70a03641bbfb55b745a490caea92070b75b7852de65ea60a344352efa13106d8e355472b4aa230572a6c44c384af4c41c89dc6c4dae3627
- SSDEEP 192:FqDUj9YutmUMSJHXTukffz8LP8R/YPq18Se:ocuTTSJjfowR/Yi18S
- TLSH T132121905EBAA873ADE7607BE48E3A2409274D711EC1B9BAF6C84640F4E3B3215D42775
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AG.Eazfuscator.NET.Hosting.x86.exe