1cf9a1579f9666561f52822fd82e6e48ab3230b917fd85b4746b7fe9a84a07f2

Resubmissions

10/11/2026, 03:38

261110-d7ccpacf85

10/11/2026, 03:36

261110-d55apaywez7

Sharing

Copy URL Twitter E-mail

General

Target
KytyPS5-2026-11-10-782a85c-Windows-x64.zip
Size 25.6MB
Sample261110-d55apaywez
SHA256 1cf9a1579f9666561f52822fd82e6e48ab3230b917fd85b4746b7fe9a84a07f2
MD5 0000790bd0e4606e1839d61676f15a8f
SHA1 209af63e1d6447572da94daa025990445454103e
SHA512 de492921d2d2ac2c662cf45b5c5a62e434446cfcb290662d3339e40c4de68c9442a805ffb0b704ac22518bd7b6ead3720ea2e9faae4a13f2ec8b3503b4d2c903
SSDEEP 786432:tRdhwvF9uTtfL4Yif0EpzwW8OHl39fd8APre6/KwYm:/TM9IjO8ozf9fd8wre6TF
TLSH
T19D4733DC9795C23F88EB756638F84B1B8F5B9F552891B4988E0C23F9B83BC60EB14514
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Qt6Core.dll
- Size 9.8MB
- SHA256 b712b4754588e89f855dc0aa087d6304b2fd21b0e0639d1cdeb9cb969bd5fb72
- MD5 dc6de406373ef20f3aa36a050d382c8f
- SHA1 885f509e00067720f8ea1f2c5a4b9d17fdb9c5b2
- SHA512 112b2f98c035102a91f099614b439bccf2f38316a5b4d7f5cf75a00a4e6edd803cb6043cd47d7dbeddcf0756c63b6269ef66124b42adb99f37e69b46feea123c
- SSDEEP 98304:y7ULMekqCZDPAlKFdu9CwJsv6tMYdJMS2r/387:yxoKFdu9CwJsv6tMeSSa/3e
- TLSH
  T1E2A639036AFA0102FAFBDA34DAB71252DBB27C46673596DF025461185D337F09E3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Qt6Gui.dll
- Size 9.1MB
- SHA256 03ba47a2025036a04f5548bce242788ac21edf551e78d5b42e1b87beb799904f
- MD5 aa20c428fe1d0288283fd7ac86c6138a
- SHA1 b2b6b097125487aedac442ea91a8b9d1bcf5bb9c
- SHA512 a77fa1b696673eb8fdb17aa017454b51bbecfba0b931bcf1fc2b0cc9b93eae5b5860945d8401be543612a6ea24066713d44d633f092e23e8d9c3530e0eb6d060
- SSDEEP 98304:ILWJ76kJHgTZg+ZC/PVqGJ6Q/Sx5kPthKMG5bpZa5M2EXUz:rFHg9g+0YQ/Sx5kPXK38zz
- TLSH
  T177A68D57B2A911D8D57BD13C8B9B9507EBB2700503629BDB01A4CA562F33BF12ABF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Qt6Network.dll
- Size 1.7MB
- SHA256 203f8ddf83c015ce56752ebe7a1986472be7dbb95c20e13ac8e1d741d9ac93d1
- MD5 a6cee5e268cfa43d2556f8a9962aee7a
- SHA1 a400259550887002cd6ba821937256d331ed1584
- SHA512 a427ad4040a93c31fc3431a1076226e50358c09f95c02eaf7a394eaa8664df555f2dd5606d450a8ffa65dad7561da75b1f0f3a139da2e33fc1733a07a628694f
- SSDEEP 24576:LaNBuUZQb0e9m8EPrcoEuyRhOaUVhYpflc96:Lan5Qb0e9REP4fu+UYQ96
- TLSH
  T1BE857C57A3E44295D86ED27DCB4B8A0BE772700543669BDF02648E152F73BE21B3E360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Qt6Svg.dll
- Size 618KB
- SHA256 3b5d871333aa92bc5363697ab5d9bc3edf74e145bb8672a15a11e834d2ee2b17
- MD5 778af64f1f5cbcd475f70aa2d6fa7c79
- SHA1 27981949c92399f3c3a6a32931fc18b677da6444
- SHA512 a44cf1617431bec92157d065031d4f6a27f893f2c66a9b7bdd8330fd47ceb82ce647d0d6201d8b0baed57d973fdcccf428ec9ce16a4f22b5ec7bb88f3013bf1b
- SSDEEP 6144:c6HNycivcATzSTN7xMeheA74qaBaj7TfAAgutn2ru0Gf+crP8Sx5Yj7yEA3+ITI5:c6HNbibzqfq4j7TtNQuR+cvB5/Wt
- TLSH
  T12FD45D57B3A60785D86AD13CCB5B8423EBB370040362D7EF41A58A552F23BE16B7D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Qt6Widgets.dll
- Size 6.3MB
- SHA256 61ddd0316a731b8dbabaf2924cd0d47b756461e37329b4f535902cf450416127
- MD5 201879867c0befc32a803e77045da97d
- SHA1 295a65c52cdbbb1d25af1008763454e02407cae5
- SHA512 dded16c266650024490bf40cd3279f30b333f34f600fa6fcbcb0a80917774f0d833e7d71a2ce6ed1cf7691b4e3d5fac0d88c984a97696e59d01b1ffcc17e4241
- SSDEEP 49152:X/jhOtxRzXn31a0R+oiSl8U7jtRtzX1s3e8fCTjjvDsXjnq7TADWVb/G5ImjNyzE:KRNj5zX9jrNkwqZjSayK6gckA7/HTHan
- TLSH
  T1F7666B57A3EA0195C4ABD17DCB0B8A17E7B2700443229BCB11698E592F737F12E7E391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  generic/qtuiotouchplugin.dll
- Size 100KB
- SHA256 69498d05870aa583c31159f9350e3d8a598b895f6525de7b6fa382395ad27b9d
- MD5 82c607d31ada26214086e561ea92bb11
- SHA1 cd997d474d135a23d5f93e21666815f88c7fa069
- SHA512 935e4fb52fcad5d671435c843a17c7b3c45949c3ff4c4497c766d0f66b9afa40d6783230d4464b9fb19b607029cb7f80c81bf23981d1d388e46ee7d09256cecd
- SSDEEP 3072:NQE90V6rxM8EX8F84Df5qdd95lQoiaobAI:NnmyM8dyiaoB
- TLSH
  T117A36D7B52A042D5C97AD27AC79A850BF372B05517719FDF02A496490F33BE22E3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  iconengines/qsvgicon.dll
- Size 69KB
- SHA256 6f793bcbecbf38250c776aea7c742ceb3b1d88945e3d009c5d2326e827a22052
- MD5 c7321149f18b64ee78eaa06404ff531f
- SHA1 8b2c14472e5161748b1e47e0bde4873d8a89e38f
- SHA512 9937eba951d213d10273f41374ec98ae5927a694ca54c686671b2f7a250d8ee5eeb05585e396d0e28c4af7d4fe6857ec52b06cd0a3d86b6000206aee519fb974
- SSDEEP 1536:cAaLoiOBXBqhM+buOxhBBZgxg+6sGFdLjuXnjin+sefYz7u+:/a6jmZe96sGFVuXnjin+sefYzx
- TLSH
  T1CB637C1367A81448DC6BC63DC357861BEE72B41467A2EBDF1351C8362F67BC11AB8361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  icuuc.dll
- Size 36KB
- SHA256 59d134ddc15ae0594f0a328979f8201662fc82634ddb7c537b156e7cf871f5eb
- MD5 be9504ec4ec25574c255c50639b5dbdd
- SHA1 fcc04017f1b7d5a8a734871750f4300568d765e6
- SHA512 2e762b4ab960e92827e8374a1c95aa83e453bf1e88a1421e8f342c17264e99e32108a706c245910a74430a1fc1117403c29f03891c2f2ef6669f9d88593985c3
- SSDEEP 768:BCFRHyCpCB+GgU77TuVnsDh7tm8T9T0qjT6IAqla1c3pmYj96mY:Y/prGPh7tm8T9S
- TLSH
  T1CAF2E70DC8044F62D3A7EB3F697D392F1922099ABF69FBB8EEB4C99441D520D10B5742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  imageformats/qgif.dll
- Size 46KB
- SHA256 ded464ef782f41862f391bc5b21c54d58f6aee670fc9f10a2d909ae5b0ba09a7
- MD5 d714673081c58cf65edafcef5a972cc2
- SHA1 1aab70199234d11c3e27c0d554896411fbb53dc4
- SHA512 890a0e3a281e06fe4ca6763e43b3c070e4c4c160aaac775a5cc772f8953f493ccd2267e347c83ce9c167086e045106cda415f86a52d6ab32f7f062b8fc0b6b75
- SSDEEP 768:rGXTVMV6wdBj3lpVt/MSskUOIEuHC7omcocVJt5Yiuiz5AL9k3:0TVMkw3j3fDpPUvHC7omcnJz7unm
- TLSH
  T1A0238D83AB6048D8D5638234D9964E2BEBB2B6544B92C7EF4221C52D1F337C13E7C769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  imageformats/qico.dll
- Size 44KB
- SHA256 0c2abdf95d778bfed9863b8be817dc6cffe2dacdd1a85b2117b4b4ccb1a08e66
- MD5 2f8b1c99cd0356aeedc0435833d68c33
- SHA1 f758bc1a9738efcbb4bb89121943de4301f892af
- SHA512 364b9a9949a5725cb83e0f2f6d4c6fac83adb3eda9729212e6a9b04b1bbe22aa01a2ea1cdd0f27331613f926860958ee61b89916f19f5d14c9beed434466b745
- SSDEEP 768:nrYUBUjz9OXYC2VfXt+Jw3onLXwJn5YiuigS5ALB:lBUjz9OIrfd+Jw3onLXwJ57u7
- TLSH
  T1A5237C53D669048AE927C678D8874E32EAB6F1605B92C7CF0265861E1F333C23E7D794
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  imageformats/qjpeg.dll
- Size 564KB
- SHA256 cd965015cce4638361d7bc01193d92a041a227d46d0759ec25d2a1a8608a6b40
- MD5 72a0fa6fbe0d7a84ee5488f9f5e19fb3
- SHA1 e3886fe3bf0983c14d9797734c62f005d8a83831
- SHA512 681aaa6fdb40dba3aac6e6164712131fce56d3104c2e472ecd67b0a65578101bed0c7dbda7f5ff7a3a5f00c444198af4292c5ffa6ffb710f46300e19c7088a4b
- SSDEEP 6144:bIszodzfrjqE9uNRx269DJZmkPCqgh2bb5crGABMvSAA1e9DwzJHXzm8qyik7tPn:kGvSCqPV3lnE9e
- TLSH
  T161C42942F6B51841C7A68478DE1AC966EB91781D03F98AF7B2D1CBD53B1BAE07B35300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  imageformats/qsvg.dll
- Size 38KB
- SHA256 950d09f635c89d677c77fed5db997c251e9a71ef771103aabfbe4eef8a6f105f
- MD5 e61f8be09c956aff5c2caba35c8311e8
- SHA1 ad31fa89377f05583b2013b1a45245e853370310
- SHA512 caea0df1a5faf36a1dd776598811f63e22e2c321c65693dc6b517c04b095d7cf1c58456ab4f900a0e8fb81daf42b8d4214a20b0ec8376ef93ae4b2f59c49790c
- SSDEEP 768:CSi7nr/w0rk/uVXy3ujilRI595gFq5YiuiunCg5ALc:Crr/w2k/uVXy3ujilRI595Uo7ulCw
- TLSH
  T164036A47CB681846E427D674D84A4E26E873F4514BA2D7CF6267822D1F723C13DBC39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  kyty_emulator.exe
- Size 25.9MB
- SHA256 852fed4695c24369e61d9a772e894940d5bcbb6739cb88882ad89491946eca0d
- MD5 b7d5209afc3fb2a0eaa3f21a17821af9
- SHA1 dbb64ebe747f42c0433b90e0e593e9800ab541cf
- SHA512 65e5cf4aa3147eb60bb339c306e64f73d05f15deed87990fe63e6b949e4c2b877940a59869ff3523986f08a1c5f132520681e9cf55e2ca10b48297c47ef4849c
- SSDEEP 196608:NSQ79dBkmO/BeTfW9mq/enqiP5HOqET/WP4+jIq4CRvN56jSRc5:H79dSmjqi9OqET/G4+jr4CvvRo
- TLSH
  T13D577E16F29214BEC44AC470939BAA23B924748F47246DEB578486353F79BF05F3AF24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  kyty_launcher.exe
- Size 5.3MB
- SHA256 059b607d4402dc5b6872a2af5d55dc09bef505e26772d3f8e88c7194248311c3
- MD5 a86d42f7977490dee52453d2f34ccbf7
- SHA1 f5743ce4666164ab131cdfa15c3fb7856761381f
- SHA512 90a1a0bb46ec562690484496b00a8d528742787a671fd55ceb0f12ef0b9c3ba67a429be26efd1d4d368d64a98f2873f715dfd73c840fec09aa6251161a3425e5
- SSDEEP 49152:ruKbXFw1ZpkSVPKbH8IzhWyaeOOG7hPZxF8wVSlnoFyn/LFPOPYGLK6+ybdX4dyN:S/huZwxF8wVQDMPYElcB9dgHCZq
- TLSH
  T1B9466C13F797219EC50AC571838BA523787574CA0B25B9FB468486313FB9AF06F39B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral26 behavioral27
- Target
  kyty_updater.exe
- Size 327KB
- SHA256 59d1309a0db3a52030a53fe5aaeac42372ab7f8c666df686e443b7e8afa8d170
- MD5 51e1fec28b548b52f1f8920cb2ed3b8d
- SHA1 7eeb25ed5c853a6eb235dd6bf1ddc106dcbfb8eb
- SHA512 cd34338b0ab0293e897dc75769c0223598c67ab339c123218a67529f4e842b14b21c894f45cfa30cdec85d4884b792c93374f2fecd267ac6855f93f7cad5fd58
- SSDEEP 6144:i6GrbtsDNEsOPCELl8W4tGv+6Xo2sa1jiL0aLs:+zslG8harXo2sa1ju
- TLSH
  T12B646D05F68918FED697C538CA834902A936BC870BB1B9DF639496393E365E04F3B710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  libwinpthread-1.dll
- Size 87KB
- SHA256 78ebbc1480d62098aa66307db2ff139abc07c137bc188f5b73bf7b131492932c
- MD5 d83cdd28eb525fad5b7628f1fda97cbc
- SHA1 eee2c0f0da1fe3acf8b6c510ac51377d7b6db90d
- SHA512 a798a26b8686d675b8614200d6f3134c783cd9ae51420dd243344cae39d7527114b1e0f380d8fccce1cb7b3593eccd02851eccce13057b5584ea9db2d3d3a8b5
- SSDEEP 1536:rRZedjhGhFF7Ogs+T901FzcRim3YTjngrZ3g:eihFocRim3YTjn6Z3g
- TLSH
  T195939477EAB2C89DC0CA92B07786CCE0B576FD460671924A03D71A153F5F9606EDC8CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  networkinformation/qnetworklistmanager.dll
- Size 69KB
- SHA256 4bc26d5b613c507634fd10f07fe031fcbd4f02157d23b9eb1407de4dd6da8278
- MD5 84bd49d5f201c44f1c289c25e2a9f160
- SHA1 bb32ebf2754156ea1d2c9bde9492714cf509d93d
- SHA512 8804eb147d38b1ab2ffd6815d60857c5a02ae11bc814ae615f32c41e8b35cfad063e7bff536de0a2ead2dd4cd7c7ce88b9d44e59083f7bac53b4feffe267023f
- SSDEEP 1536:sfdGtaylhbYR8KQ/BLfjSlXi5+Qn3snc7uv:E3IFYSKQ/BDjSScncw
- TLSH
  T1EE634A56A7A84489E436C23DD9E31F56F672F46247228BCF1761831E0F733C16A7EA81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32