General
- Target Lyre.exe
- Size 10.9MB
- Sample261018-w5k6xsf14k
- SHA256 c48bbeaf4b295d75a0461bd4f09376130a55a4bb624fa37a3908e158c52ceb0f
- MD5 99881611b47af2f26ddb06414e5845a8
- SHA1 d3a40de5aa59eb040a4edec72158309aef1cd8b2
- SHA512 af6148cb64e015c405f75ba523a289dcecea9e90a317395424449376f5867d7f00d6fadf98860981d8518b5919f2cda9b21ba1c3e28da97538f3bca7bd54b997
- SSDEEP 98304:OZ3AvoEjlVdG90ygr2x2KGgNj4Jwk/TQY0w2itptaZFns9W0GqzJHqsIvDv:OSgEjlvG+VrY2a54JtTQiptv9Oqz8sG
- TLSH T156B6CF13F3D646ECD0A6D23CCEA7CA25E772B821077657DF069052295EA73E04E7A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Lyre.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lyre.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Lyre.exe
- Size 10.9MB
- SHA256 c48bbeaf4b295d75a0461bd4f09376130a55a4bb624fa37a3908e158c52ceb0f
- MD5 99881611b47af2f26ddb06414e5845a8
- SHA1 d3a40de5aa59eb040a4edec72158309aef1cd8b2
- SHA512 af6148cb64e015c405f75ba523a289dcecea9e90a317395424449376f5867d7f00d6fadf98860981d8518b5919f2cda9b21ba1c3e28da97538f3bca7bd54b997
- SSDEEP 98304:OZ3AvoEjlVdG90ygr2x2KGgNj4Jwk/TQY0w2itptaZFns9W0GqzJHqsIvDv:OSgEjlvG+VrY2a54JtTQiptv9Oqz8sG
- TLSH T156B6CF13F3D646ECD0A6D23CCEA7CA25E772B821077657DF069052295EA73E04E7A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger