Overview
overview
3Static
static
32389414419....6.zip
windows7-x64
12389414419....6.zip
windows10-2004-x64
12389414419...PI.dll
windows7-x64
12389414419...PI.dll
windows10-2004-x64
12389414419...on.png
windows7-x64
12389414419...on.png
windows10-2004-x64
32389414419...or.png
windows7-x64
12389414419...or.png
windows10-2004-x64
32389414419...UI.png
windows7-x64
12389414419...UI.png
windows10-2004-x64
32389414419...CZ.csv
windows7-x64
12389414419...CZ.csv
windows10-2004-x64
12389414419...DE.csv
windows7-x64
12389414419...DE.csv
windows10-2004-x64
12389414419...EN.csv
windows7-x64
12389414419...EN.csv
windows10-2004-x64
12389414419...ES.csv
windows7-x64
12389414419...ES.csv
windows10-2004-x64
12389414419...FI.csv
windows7-x64
12389414419...FI.csv
windows10-2004-x64
12389414419...FR.csv
windows7-x64
12389414419...FR.csv
windows10-2004-x64
12389414419...ID.csv
windows7-x64
12389414419...ID.csv
windows10-2004-x64
12389414419...IT.csv
windows7-x64
12389414419...IT.csv
windows10-2004-x64
12389414419...JP.csv
windows7-x64
12389414419...JP.csv
windows10-2004-x64
12389414419...KR.csv
windows7-x64
12389414419...KR.csv
windows10-2004-x64
12389414419...NL.csv
windows7-x64
12389414419...NL.csv
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
2389414419_Zoning_Adjuster_1.6.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2389414419_Zoning_Adjuster_1.6.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
2389414419 Zoning Adjuster 1.6/CitiesHarmony.API.dll
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
2389414419 Zoning Adjuster 1.6/CitiesHarmony.API.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterButton.png
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterButton.png
Resource
win10v2004-20230824-en
Behavioral task
behavioral7
Sample
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterCursor.png
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterCursor.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterUUI.png
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterUUI.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/cs-CZ.csv
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/cs-CZ.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/de-DE.csv
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/de-DE.csv
Resource
win10v2004-20230824-en
Behavioral task
behavioral15
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/en-EN.csv
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/en-EN.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/es-ES.csv
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/es-ES.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/fi-FI.csv
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/fi-FI.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/fr-FR.csv
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/fr-FR.csv
Resource
win10v2004-20230824-en
Behavioral task
behavioral23
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/id-ID.csv
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/id-ID.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/it-IT.csv
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/it-IT.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/ja-JP.csv
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/ja-JP.csv
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/ko-KR.csv
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/ko-KR.csv
Resource
win10v2004-20230824-en
Behavioral task
behavioral31
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/nl-NL.csv
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
2389414419 Zoning Adjuster 1.6/Translations/Core/nl-NL.csv
Resource
win10v2004-20230703-en
General
-
Target
2389414419_Zoning_Adjuster_1.6.zip
-
Size
196KB
-
MD5
d56544dfc3b407a045f3a71e5762270e
-
SHA1
c7ffd26722f63c1f6e555c0c29ad69137a704978
-
SHA256
e215fc35d3a7ef06e8ca35ec5f5a03923bd0fcb3ee660a50cee687057dd11d83
-
SHA512
66c37180f91c2a11cdb076cab8b449d7457d5b41ea6e187c0d730e4a5f0cecc214548e4cfc8221b1f49bb86d5df3692ee61fae82caaee713deba576a343abcc5
-
SSDEEP
6144:yeNZUv0AqsAtIJ4HMDPgW3Ihe9dMAxPq94X0RZrP:yeDa0AqsAt0zPgWHFx8ZrP
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/2389414419 Zoning Adjuster 1.6/CitiesHarmony.API.dll unpack001/2389414419 Zoning Adjuster 1.6/UnifiedUILib.dll unpack001/2389414419 Zoning Adjuster 1.6/ZoningAdjuster.dll
Files
-
2389414419_Zoning_Adjuster_1.6.zip.zip
-
2389414419 Zoning Adjuster 1.6/CitiesHarmony.API.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterButton.png.png
-
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterCursor.png.png
-
2389414419 Zoning Adjuster 1.6/Resources/ZoningAdjusterUUI.png.png
-
2389414419 Zoning Adjuster 1.6/Translations/Core/cs-CZ.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/de-DE.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/en-EN.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/es-ES.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/fi-FI.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/fr-FR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/id-ID.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/it-IT.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/ja-JP.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/ko-KR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/nl-NL.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/pl-PL.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/pt-BR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/ru-RU.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/sk-SK.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/tr-TR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/uk-UA.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/zh-CN.csv
-
2389414419 Zoning Adjuster 1.6/Translations/Core/zh-TW.csv
-
2389414419 Zoning Adjuster 1.6/Translations/cs-CZ.csv
-
2389414419 Zoning Adjuster 1.6/Translations/de-DE.csv
-
2389414419 Zoning Adjuster 1.6/Translations/en-EN.csv
-
2389414419 Zoning Adjuster 1.6/Translations/es-ES.csv
-
2389414419 Zoning Adjuster 1.6/Translations/fr-FR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/it-IT.csv
-
2389414419 Zoning Adjuster 1.6/Translations/ja-JP.csv
-
2389414419 Zoning Adjuster 1.6/Translations/ko-KR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/nl-NL.csv
-
2389414419 Zoning Adjuster 1.6/Translations/pt-BR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/ru-RU.csv
-
2389414419 Zoning Adjuster 1.6/Translations/tr-TR.csv
-
2389414419 Zoning Adjuster 1.6/Translations/uk-UA.csv
-
2389414419 Zoning Adjuster 1.6/Translations/zh-CN.csv
-
2389414419 Zoning Adjuster 1.6/Translations/zh-TW.csv
-
2389414419 Zoning Adjuster 1.6/UnifiedUILib.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
2389414419 Zoning Adjuster 1.6/ZoningAdjuster.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ