General
- Target MYZs0kx.exe
- Size 86.3MB
- Sample261024-nb5pgahv3w
- SHA256 2805142e42f6170d224d02d62560079b72e55e03b8395a1896f617b752e08d40
- MD5 a403223757d7a735cda6039f662838c0
- SHA1 e424055a5ef88bd415fac78812c6fc4606a4d41a
- SHA512 bc81abb03d6ebedd72826893fde0b4b4921cfde5878f9dd874c3ecd5eff3facad15212d0454a3c18c745d00f24d396e193e0cd4e074086707eb429fe2a7a56e4
- SSDEEP 1572864:lquQsHicI75+QF+YwVbSusxrBWbiM6wQzBAmDty7nv:cutCz7IY/wU/BhvzBZDtcv
- TLSH T147183303710A2ABEE469813A8432E856157F6E65B31EDC5BD1D03B5CDE760A12E3FE07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
MYZs0kx.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
MYZs0kx.exe
Resource
win11ltsc2024-20260911-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target MYZs0kx.exe
- Size 86.3MB
- SHA256 2805142e42f6170d224d02d62560079b72e55e03b8395a1896f617b752e08d40
- MD5 a403223757d7a735cda6039f662838c0
- SHA1 e424055a5ef88bd415fac78812c6fc4606a4d41a
- SHA512 bc81abb03d6ebedd72826893fde0b4b4921cfde5878f9dd874c3ecd5eff3facad15212d0454a3c18c745d00f24d396e193e0cd4e074086707eb429fe2a7a56e4
- SSDEEP 1572864:lquQsHicI75+QF+YwVbSusxrBWbiM6wQzBAmDty7nv:cutCz7IY/wU/BhvzBZDtcv
- TLSH T147183303710A2ABEE469813A8432E856157F6E65B31EDC5BD1D03B5CDE760A12E3FE07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Windows Management Instrumentation
1