General
-
Target
zuygy.zip
-
Size
173KB
-
Sample
201030-jjms8vd88a
-
MD5
ae16be045c259aa84c238f30a66f5fde
-
SHA1
ab567844d0fd13389219fb42303cc2d6544fcb0f
-
SHA256
c6d67ee0a72942ae1cfc53e7c7267814c46a47e8ee9e1399a6b046dfedd360ed
-
SHA512
e1afa9588f321a3dbc64d058743e20d9b2ac1086d0144bf21c6c125e29a0691dad2b353b9d8e2172a56a1182a34c422fe981bf16bdb06ef3ee97894bdd8cdb70
Static task
static1
Behavioral task
behavioral1
Sample
zuygy.dll
Resource
win7v20201028
Behavioral task
behavioral2
Sample
zuygy.dll
Resource
win10v20201028
Malware Config
Extracted
zloader
main
02.04.2020
https://klill.com/sound.php
https://geost.com/sound.php
https://tarsilh.com/sound.php
https://lildor.com/sound.php
https://imosey.com/sound.php
https://obeaf.com/sound.php
https://pheia.com/sound.php
https://smenard.com/sound.php
Targets
-
-
Target
zuygy.dll
-
Size
863KB
-
MD5
f2f6fef7797832e67d7b0d0c3bf5b671
-
SHA1
c43c113ad5fd90a04f96b2188078ce372fd84859
-
SHA256
e3bcf059f0ad7b1c92462646e135623d3ce75addcd6a0d207b78e2fbfb6dac2d
-
SHA512
8a29c002cc8658a4753a35c00d426ce5703d4f008675fad158691a7ad63c764b668c4afe471f9645d91a863a1f1d5370aa96fdd1d79917b45838e89a084a5cc1
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-