6ad0ac0bd56198b3d303ece717968c57e6cfea16acf86cca9b4495ed3536614f

Sharing

Copy URL Twitter E-mail

General

Target
KytyPS5-2026-10-12-df5b9b9-Windows-x64.zip
Size 24.7MB
Sample261012-vq9ejaec47
SHA256 6ad0ac0bd56198b3d303ece717968c57e6cfea16acf86cca9b4495ed3536614f
MD5 08c00e835c5ad88d8d87551cedbadebc
SHA1 a8ff902a14d2418b4ddd9005014bcf19ca4e685b
SHA512 9e989e35542c530990ed5ddba39f7ebf61b3c942d5a9d0d404a3b49eb939372b12408f97588a949a9c96ed355fe93a8ade41e183c9d8fced0dee63c0c22b2ce6
SSDEEP 786432:h9fd8AsCNHl5TSbqre/pMgpTgzpOrM9FuVRp3Nkrw/KwY2:h9fd8cT+qre/oOrM9M3ywTr
TLSH
T1894733ACA7D2F575B82C8038B8CD97524F5FBF591A227E588D2C01FAE41F284D3B8564
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Qt6Core.dll
- Size 9.8MB
- SHA256 b712b4754588e89f855dc0aa087d6304b2fd21b0e0639d1cdeb9cb969bd5fb72
- MD5 dc6de406373ef20f3aa36a050d382c8f
- SHA1 885f509e00067720f8ea1f2c5a4b9d17fdb9c5b2
- SHA512 112b2f98c035102a91f099614b439bccf2f38316a5b4d7f5cf75a00a4e6edd803cb6043cd47d7dbeddcf0756c63b6269ef66124b42adb99f37e69b46feea123c
- SSDEEP 98304:y7ULMekqCZDPAlKFdu9CwJsv6tMYdJMS2r/387:yxoKFdu9CwJsv6tMeSSa/3e
- TLSH
  T1E2A639036AFA0102FAFBDA34DAB71252DBB27C46673596DF025461185D337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 03ba47a2025036a04f5548bce242788ac21edf551e78d5b42e1b87beb799904f
- MD5 aa20c428fe1d0288283fd7ac86c6138a
- SHA1 b2b6b097125487aedac442ea91a8b9d1bcf5bb9c
- SHA512 a77fa1b696673eb8fdb17aa017454b51bbecfba0b931bcf1fc2b0cc9b93eae5b5860945d8401be543612a6ea24066713d44d633f092e23e8d9c3530e0eb6d060
- SSDEEP 98304:ILWJ76kJHgTZg+ZC/PVqGJ6Q/Sx5kPthKMG5bpZa5M2EXUz:rFHg9g+0YQ/Sx5kPXK38zz
- TLSH
  T177A68D57B2A911D8D57BD13C8B9B9507EBB2700503629BDB01A4CA562F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 203f8ddf83c015ce56752ebe7a1986472be7dbb95c20e13ac8e1d741d9ac93d1
- MD5 a6cee5e268cfa43d2556f8a9962aee7a
- SHA1 a400259550887002cd6ba821937256d331ed1584
- SHA512 a427ad4040a93c31fc3431a1076226e50358c09f95c02eaf7a394eaa8664df555f2dd5606d450a8ffa65dad7561da75b1f0f3a139da2e33fc1733a07a628694f
- SSDEEP 24576:LaNBuUZQb0e9m8EPrcoEuyRhOaUVhYpflc96:Lan5Qb0e9REP4fu+UYQ96
- TLSH
  T1BE857C57A3E44295D86ED27DCB4B8A0BE772700543669BDF02648E152F73BE21B3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Qt6Svg.dll
- Size 618KB
- SHA256 3b5d871333aa92bc5363697ab5d9bc3edf74e145bb8672a15a11e834d2ee2b17
- MD5 778af64f1f5cbcd475f70aa2d6fa7c79
- SHA1 27981949c92399f3c3a6a32931fc18b677da6444
- SHA512 a44cf1617431bec92157d065031d4f6a27f893f2c66a9b7bdd8330fd47ceb82ce647d0d6201d8b0baed57d973fdcccf428ec9ce16a4f22b5ec7bb88f3013bf1b
- SSDEEP 6144:c6HNycivcATzSTN7xMeheA74qaBaj7TfAAgutn2ru0Gf+crP8Sx5Yj7yEA3+ITI5:c6HNbibzqfq4j7TtNQuR+cvB5/Wt
- TLSH
  T12FD45D57B3A60785D86AD13CCB5B8423EBB370040362D7EF41A58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 61ddd0316a731b8dbabaf2924cd0d47b756461e37329b4f535902cf450416127
- MD5 201879867c0befc32a803e77045da97d
- SHA1 295a65c52cdbbb1d25af1008763454e02407cae5
- SHA512 dded16c266650024490bf40cd3279f30b333f34f600fa6fcbcb0a80917774f0d833e7d71a2ce6ed1cf7691b4e3d5fac0d88c984a97696e59d01b1ffcc17e4241
- SSDEEP 49152:X/jhOtxRzXn31a0R+oiSl8U7jtRtzX1s3e8fCTjjvDsXjnq7TADWVb/G5ImjNyzE:KRNj5zX9jrNkwqZjSayK6gckA7/HTHan
- TLSH
  T1F7666B57A3EA0195C4ABD17DCB0B8A17E7B2700443229BCB11698E592F737F12E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  generic/qtuiotouchplugin.dll
- Size 100KB
- SHA256 69498d05870aa583c31159f9350e3d8a598b895f6525de7b6fa382395ad27b9d
- MD5 82c607d31ada26214086e561ea92bb11
- SHA1 cd997d474d135a23d5f93e21666815f88c7fa069
- SHA512 935e4fb52fcad5d671435c843a17c7b3c45949c3ff4c4497c766d0f66b9afa40d6783230d4464b9fb19b607029cb7f80c81bf23981d1d388e46ee7d09256cecd
- SSDEEP 3072:NQE90V6rxM8EX8F84Df5qdd95lQoiaobAI:NnmyM8dyiaoB
- TLSH
  T117A36D7B52A042D5C97AD27AC79A850BF372B05517719FDF02A496490F33BE22E3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  iconengines/qsvgicon.dll
- Size 69KB
- SHA256 6f793bcbecbf38250c776aea7c742ceb3b1d88945e3d009c5d2326e827a22052
- MD5 c7321149f18b64ee78eaa06404ff531f
- SHA1 8b2c14472e5161748b1e47e0bde4873d8a89e38f
- SHA512 9937eba951d213d10273f41374ec98ae5927a694ca54c686671b2f7a250d8ee5eeb05585e396d0e28c4af7d4fe6857ec52b06cd0a3d86b6000206aee519fb974
- SSDEEP 1536:cAaLoiOBXBqhM+buOxhBBZgxg+6sGFdLjuXnjin+sefYz7u+:/a6jmZe96sGFVuXnjin+sefYzx
- TLSH
  T1CB637C1367A81448DC6BC63DC357861BEE72B41467A2EBDF1351C8362F67BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  icuuc.dll
- Size 36KB
- SHA256 6febd789ff616dd6398ae2453adc1e7ccd7bbb6aee8c623a2638c1c00d51e003
- MD5 e9f9397709df3528c75c1d19fd64767e
- SHA1 2d392c946c58203679cd33aa463041639e9fcf91
- SHA512 304a41711e6247f6dedf50697c8429a92732bd8104f94dbc5589eb60700d50a835643f16d391d11850d48bf3309ec8f4e170e2ddefe776b5459b2ba3682f8bd3
- SSDEEP 768:/CFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mr:K/prGPh7tm8T9Z
- TLSH
  T1D3F2D60DC8084F61D3A7DB3F697D392F1922099ABF69FBB8EEB4C99441D520D20B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  imageformats/qgif.dll
- Size 46KB
- SHA256 ded464ef782f41862f391bc5b21c54d58f6aee670fc9f10a2d909ae5b0ba09a7
- MD5 d714673081c58cf65edafcef5a972cc2
- SHA1 1aab70199234d11c3e27c0d554896411fbb53dc4
- SHA512 890a0e3a281e06fe4ca6763e43b3c070e4c4c160aaac775a5cc772f8953f493ccd2267e347c83ce9c167086e045106cda415f86a52d6ab32f7f062b8fc0b6b75
- SSDEEP 768:rGXTVMV6wdBj3lpVt/MSskUOIEuHC7omcocVJt5Yiuiz5AL9k3:0TVMkw3j3fDpPUvHC7omcnJz7unm
- TLSH
  T1A0238D83AB6048D8D5638234D9964E2BEBB2B6544B92C7EF4221C52D1F337C13E7C769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  imageformats/qico.dll
- Size 44KB
- SHA256 0c2abdf95d778bfed9863b8be817dc6cffe2dacdd1a85b2117b4b4ccb1a08e66
- MD5 2f8b1c99cd0356aeedc0435833d68c33
- SHA1 f758bc1a9738efcbb4bb89121943de4301f892af
- SHA512 364b9a9949a5725cb83e0f2f6d4c6fac83adb3eda9729212e6a9b04b1bbe22aa01a2ea1cdd0f27331613f926860958ee61b89916f19f5d14c9beed434466b745
- SSDEEP 768:nrYUBUjz9OXYC2VfXt+Jw3onLXwJn5YiuigS5ALB:lBUjz9OIrfd+Jw3onLXwJ57u7
- TLSH
  T1A5237C53D669048AE927C678D8874E32EAB6F1605B92C7CF0265861E1F333C23E7D794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  imageformats/qjpeg.dll
- Size 564KB
- SHA256 cd965015cce4638361d7bc01193d92a041a227d46d0759ec25d2a1a8608a6b40
- MD5 72a0fa6fbe0d7a84ee5488f9f5e19fb3
- SHA1 e3886fe3bf0983c14d9797734c62f005d8a83831
- SHA512 681aaa6fdb40dba3aac6e6164712131fce56d3104c2e472ecd67b0a65578101bed0c7dbda7f5ff7a3a5f00c444198af4292c5ffa6ffb710f46300e19c7088a4b
- SSDEEP 6144:bIszodzfrjqE9uNRx269DJZmkPCqgh2bb5crGABMvSAA1e9DwzJHXzm8qyik7tPn:kGvSCqPV3lnE9e
- TLSH
  T161C42942F6B51841C7A68478DE1AC966EB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  imageformats/qsvg.dll
- Size 38KB
- SHA256 950d09f635c89d677c77fed5db997c251e9a71ef771103aabfbe4eef8a6f105f
- MD5 e61f8be09c956aff5c2caba35c8311e8
- SHA1 ad31fa89377f05583b2013b1a45245e853370310
- SHA512 caea0df1a5faf36a1dd776598811f63e22e2c321c65693dc6b517c04b095d7cf1c58456ab4f900a0e8fb81daf42b8d4214a20b0ec8376ef93ae4b2f59c49790c
- SSDEEP 768:CSi7nr/w0rk/uVXy3ujilRI595gFq5YiuiunCg5ALc:Crr/w2k/uVXy3ujilRI595Uo7ulCw
- TLSH
  T164036A47CB681846E427D674D84A4E26E873F4514BA2D7CF6267822D1F723C13DBC39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  include/opus/opus_defines.h
- Size 36KB
- SHA256 927373ef41502eda937e08fcabe17b92a7b1f5aca16f81cd5a03b017bcf69119
- MD5 a8f2ea6712138340e0fb1177464ec837
- SHA1 7e00b241e2be7850c9a7845c9ecdf97189610f84
- SHA512 adb75052a22bc45d8c136a54918201c2661dcf0a079e94fd500672cf47bb5f5fae18fc4bf88cb31b9e4b0df862ae49066c2163f13f610285cc7d17ee8c339d2b
- SSDEEP 768:7TCR8mxA5iltKLI73qi7H7RpX7+zXW6y2G2aa:7TZm+5ilttqiPRpr8V
- TLSH
  T1F9F2856F28D1B361503D00148BDFBF80D318756E1791078C78AEA8EA076BBC95B675EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  kyty_emulator.exe
- Size 23.1MB
- SHA256 758a7f3000aec4017f14b99a4c8ca95ce575393dfecc74f28faf42c38f6d0905
- MD5 98c612ecca49cd4211d7efc58f5649c5
- SHA1 c428ae8eed39c7b447068062d245fa0319b1fe06
- SHA512 08dfe36325916d93b39ef9d23b56c39a6bddd0249a12bbc78429d18d0bffc8739ecbb7bb71a668baef47b268c0f73e56e0c0b522acec9f09701327cdfa7c3374
- SSDEEP 196608:jSi74uDN3y0F1ZzPa0BpDSlQdbH+SWVTkxRROzvlqqqqqWqqqq5x0N:T74uFhYQFHnUTkQjlqqqqqWqqqqj0
- TLSH
  T1F0377D0BF69764ADC40AC8B0835A9A23BA24708E07257DEB17D456343F7ABE05F39F54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26 behavioral27
- Target
  kyty_updater.exe
- Size 322KB
- SHA256 0c6b4186eea0d5e3afb2757d0fccb6c4dff12f194461dad67faca188f530d5bf
- MD5 cf041a8d97dc3fab6631eb4e947a15c6
- SHA1 67f66d41b8badf8d4ec2e6bdde6b7ba03082c1e7
- SHA512 77a9febe4281b587178a6715ee074a2f95970a3ee3862fcdb456b91b2e41562454fb2ce52c819ab7d415ae12e295faedafb7b445f953fd16a075208a48c2bd95
- SSDEEP 6144:857vU5X23fsksyP7EY6r8i7zoEKmecGLN3nLAc1:E77yW7EY6roEKmecGLNX71
- TLSH
  T194645B06F68524FED59BC478C6434906AE267C8B0B71B9EF23D446263E36AE45F3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  launcher.exe
- Size 4.1MB
- SHA256 420cbdd5ef08d1e414272f27784112802641767ab732eccb52b79c8f35c99050
- MD5 d4a29d5495e075887188e4031fcb4980
- SHA1 087fdc0829cb519ef08e9fbbd06d7e883dcf9fef
- SHA512 155ec1bb84b14a8ef1a09939c4f1cb4fe781bd18cdaa5fb193d5811867055d950e9f6a546da9df890f050deb04246993e75d5cae68ac543e0bcc2f109e63db08
- SSDEEP 49152:Khh+eZ06Q0jR528fqfm88420lmMrV3VCiTJ0K25R+QPzu63P8HmVdJdJ3h9qgKjT:c26D5Z988S9O13211daSUIag
- TLSH
  T1B6166B07B79711DEC40AC471935BA523A97170CA0B26AEEB469487353FB8BF06E3DB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral30 behavioral31
- Target
  libwinpthread-1.dll
- Size 87KB
- SHA256 78ebbc1480d62098aa66307db2ff139abc07c137bc188f5b73bf7b131492932c
- MD5 d83cdd28eb525fad5b7628f1fda97cbc
- SHA1 eee2c0f0da1fe3acf8b6c510ac51377d7b6db90d
- SHA512 a798a26b8686d675b8614200d6f3134c783cd9ae51420dd243344cae39d7527114b1e0f380d8fccce1cb7b3593eccd02851eccce13057b5584ea9db2d3d3a8b5
- SSDEEP 1536:rRZedjhGhFF7Ogs+T901FzcRim3YTjngrZ3g:eihFocRim3YTjn6Z3g
- TLSH
  T195939477EAB2C89DC0CA92B07786CCE0B576FD460671924A03D71A153F5F9606EDC8CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32