Static task
static1
Behavioral task
behavioral1
Sample
HA_ZealotRMConverter-40_CZ.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
HA_ZealotRMConverter-40_CZ.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
安装说明.url
Resource
win10v2004-20231222-en
General
-
Target
6840d6485c6cddefa4ab12e761f6bcf8
-
Size
6.2MB
-
MD5
6840d6485c6cddefa4ab12e761f6bcf8
-
SHA1
1afea3967f1bd1baab5c8c5feb836f5a13e7307c
-
SHA256
1507ee26d06f16ddcac784565d44190ecdfd70de2c3174b70cc735957f741439
-
SHA512
eafb69ef43fbba461426e946ab3d04eaabe4a1b48b95ae2d3072b62635ebe40c31de64971839589f872661cf2249f669e4a11fd3279f4a742c1d83bcfee937c3
-
SSDEEP
98304:/PxmRP74WwiZQu+yK6tdQVl4O8nGwgNxuQUiXEGYrVIBdNoy+u1JLaY7n1Av:XAP3Z7fdQVKO8nGwguQBXsW0y++JLDev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HA_ZealotRMConverter-40_CZ.EXE
Files
-
6840d6485c6cddefa4ab12e761f6bcf8.rar
-
HA_ZealotRMConverter-40_CZ.EXE.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 284KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
-
安装说明.url.url