Overview
overview
7Static
static
3Release.zip
windows10-1703-x64
1Release/Bu...ld.exe
windows10-1703-x64
1Release/Bu...ch.exe
windows10-1703-x64
1Release/Co...or.exe
windows10-1703-x64
1Release/Credits.txt
windows10-1703-x64
1Release/Loader.exe
windows10-1703-x64
7Release/Re...ct.txt
windows10-1703-x64
1Release/Te...ep.mp3
windows10-1703-x64
1Release/Te...FG.ini
windows10-1703-x64
1Release/Te...en.bin
windows10-1703-x64
3Release/Te...ty.txt
windows10-1703-x64
1Release/Te...kt.dll
windows10-1703-x64
1Release/Us...er.exe
windows10-1703-x64
1Analysis
-
max time kernel
133s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
04/06/2024, 07:38
Static task
static1
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Release/Builds/Core Build.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Release/Builds/OwlFetch.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Release/Configurator.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Release/Credits.txt
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Release/Loader.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
Release/Readme b4 Extract.txt
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Release/Temp/Resources/Beep.mp3
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
Release/Temp/Resources/CFG.ini
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Release/Temp/Resources/PreZen.bin
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
Release/Temp/Resources/Self_sanity.txt
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Release/Temp/Resources/ZenConekt.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
Release/UseSafeLoader.exe
Resource
win10-20240404-en
General
-
Target
Release.zip
-
Size
2.2MB
-
MD5
8eb8689953b50ed87194e2501e8bacce
-
SHA1
0b3ffefe623bb1330f7e4d7dad553f6c1d2fae25
-
SHA256
21848b3990f941028498dbde1b501b6b45adc21a09291453972ed278661eb514
-
SHA512
03de0a0f12531d83e99dd1d47a8834613aec801b2eba512ef46e2dd7a03fb4564f8ec9eff75f9dd4a6f3aa200de326ae67fedc3fccb3197f8c7d71e13c0985e1
-
SSDEEP
49152:gzrYVxHrIqvhEoSRlic9IfWhhNWcUic9+JJ7KLG3VYic9Jv0W4Lg:goVxUqpMsc9kUEchc9GJ7KLGvc9Rl4k
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Release.zip1⤵PID:2324
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5020