General

  • Target
    zen.win-specific.zip
  • Size 94.7MB
  • Sample240923-xp2dms1fjf
  • SHA256 3db2c1f543f255d87c37c3faa0dc3c4e20e0e939a20c58db4efad1bab9b55e9a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Bazar/Team9 Loader payload 1 IoCs
  • Bazarloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • zen.win-specific.zip
    .zip 94.7MB
  • zen.win-specific\zen\AccessibleMarshal.dll
    .dll 29KB
  • zen.win-specific\zen\application.ini
    665B
  • zen.win-specific\zen\browser\VisualElements\PrivateBrowsing_150.png
    .png 7KB
  • zen.win-specific\zen\browser\VisualElements\PrivateBrowsing_70.png
    .png 3KB
  • zen.win-specific\zen\browser\VisualElements\VisualElements_150.png
    .png 6KB
  • zen.win-specific\zen\browser\VisualElements\VisualElements_70.png
    .png 3KB
  • zen.win-specific\zen\browser\features\[email protected]
    .js 229KB
  • zen.win-specific\zen\browser\features\[email protected]
    .zip .js 67KB
  • zen.win-specific\zen\browser\features\[email protected]
    .zip .js 167KB
  • zen.win-specific\zen\browser\features\[email protected]
    .zip .js 19KB
  • zen.win-specific\zen\browser\features\[email protected]
    .js 433KB
  • zen.win-specific\zen\browser\omni.ja
    61.5MB
  • zen.win-specific\zen\defaults\pref\channel-prefs.js
    427B
  • zen.win-specific\zen\dependentlibs.list
    55B
  • zen.win-specific\zen\firefox.VisualElementsManifest.xml
    557B
  • zen.win-specific\zen\fonts\TwemojiMozilla.ttf
    1.4MB
  • zen.win-specific\zen\freebl3.dll
    .dll 841KB
  • zen.win-specific\zen\gkcodecs.dll
    .dll 8.6MB
  • zen.win-specific\zen\gmp-clearkey\0.1\clearkey.dll
    .dll 102KB
  • zen.win-specific\zen\gmp-clearkey\0.1\manifest.json
    229B
  • zen.win-specific\zen\ipcclientcerts.dll
    .dll 203KB
  • zen.win-specific\zen\lgpllibs.dll
    .dll 146KB
  • zen.win-specific\zen\libEGL.dll
    .dll 46KB
  • zen.win-specific\zen\libGLESv2.dll
    .dll 4.3MB
  • zen.win-specific\zen\mozavcodec.dll
    .dll 3.1MB
  • zen.win-specific\zen\mozavutil.dll
    .dll 564KB
  • zen.win-specific\zen\mozglue.dll
    .dll 744KB
  • zen.win-specific\zen\msvcp140.dll
    .dll 549KB
  • zen.win-specific\zen\nmhproxy.exe
    .exe 566KB
  • zen.win-specific\zen\notificationserver.dll
    .dll 58KB
  • zen.win-specific\zen\nss3.dll
    .dll 2.3MB
  • zen.win-specific\zen\nssckbi.dll
    .dll 369KB
  • zen.win-specific\zen\omni.ja
    46.8MB
  • zen.win-specific\zen\osclientcerts.dll
    .dll 344KB
  • zen.win-specific\zen\pingsender.exe
    .exe 78KB
  • zen.win-specific\zen\platform.ini
    158B
  • zen.win-specific\zen\plugin-container.exe
    .exe 282KB
  • zen.win-specific\zen\precomplete
    1KB
  • zen.win-specific\zen\private_browsing.VisualElementsManifest.xml
    559B
  • zen.win-specific\zen\private_browsing.exe
    .exe 130KB
  • zen.win-specific\zen\removed-files
    16B
  • zen.win-specific\zen\softokn3.dll
    .dll 283KB
  • zen.win-specific\zen\uninstall\helper.exe
    .exe 1.1MB
  • $EXEDIR/uninstaller.exe.nsis
    590KB
  • $PLUGINSDIR/AccessControl.dll
    .dll 21KB
  • $PLUGINSDIR/AppAssocReg.dll
    .dll 14KB
  • $PLUGINSDIR/ApplicationID.dll
    .dll 55KB
  • $PLUGINSDIR/CityHash.dll
    .dll 53KB
  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll 14KB
  • $PLUGINSDIR/PinToTaskbar.dll
    .dll 3KB
  • $PLUGINSDIR/ShellLink.dll
    .dll 14KB
  • $PLUGINSDIR/System.dll
    .dll 22KB
  • $PLUGINSDIR/UAC.dll
    .dll 28KB
  • $PLUGINSDIR/liteFirewallW.dll
    .dll 19KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • zen.win-specific\zen\update-settings.ini
    109B
  • zen.win-specific\zen\updater.exe
    .exe 425KB
  • zen.win-specific\zen\updater.ini
    1KB
  • zen.win-specific\zen\vcruntime140.dll
    .dll 106KB
  • zen.win-specific\zen\vcruntime140_1.dll
    .dll 38KB
  • zen.win-specific\zen\xul.dll
    .dll 125.3MB
  • zen.win-specific\zen\zen.exe
    .exe 941KB

zen.win-specific.zip

  • SHA256 3db2c1f543f255d87c37c3faa0dc3c4e20e0e939a20c58db4efad1bab9b55e9a
  • MD5 SHA1 SHA512 SSDEEP