Overview
overview
8Static
static
3zapret-dis...rt.dll
windows7-x64
1zapret-dis...rt.dll
windows10-2004-x64
1zapret-dis...64.sys
windows10-2004-x64
1zapret-dis...n1.dll
windows7-x64
1zapret-dis...n1.dll
windows10-2004-x64
1zapret-dis...ws.exe
windows7-x64
1zapret-dis...ws.exe
windows10-2004-x64
1zapret-dis...es.bat
windows7-x64
8zapret-dis...es.bat
windows10-2004-x64
8zapret-dis...rd.bat
windows7-x64
8zapret-dis...rd.bat
windows10-2004-x64
8zapret-dis...T).bat
windows7-x64
8zapret-dis...T).bat
windows10-2004-x64
8zapret-dis...2).bat
windows7-x64
8zapret-dis...2).bat
windows10-2004-x64
8zapret-dis...3).bat
windows7-x64
8zapret-dis...3).bat
windows10-2004-x64
8zapret-dis...4).bat
windows7-x64
8zapret-dis...4).bat
windows10-2004-x64
8zapret-dis...5).bat
windows7-x64
8zapret-dis...5).bat
windows10-2004-x64
8zapret-dis...D).bat
windows7-x64
8zapret-dis...D).bat
windows10-2004-x64
8zapret-dis...�).bat
windows7-x64
8zapret-dis...�).bat
windows10-2004-x64
8zapret-dis...2).bat
windows7-x64
8zapret-dis...2).bat
windows10-2004-x64
8zapret-dis...al.bat
windows7-x64
8zapret-dis...al.bat
windows10-2004-x64
8zapret-dis...ll.bat
windows7-x64
8zapret-dis...ll.bat
windows10-2004-x64
8zapret-dis...ve.bat
windows7-x64
8Analysis
-
max time kernel
19s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
28/03/2025, 23:20
Static task
static1
Behavioral task
behavioral1
Sample
zapret-discord-youtube-main/bin/WinDivert.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
zapret-discord-youtube-main/bin/WinDivert.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
zapret-discord-youtube-main/bin/WinDivert64.sys
Resource
win10v2004-20250314-en
Behavioral task
behavioral4
Sample
zapret-discord-youtube-main/bin/cygwin1.dll
Resource
win7-20241010-en
Behavioral task
behavioral5
Sample
zapret-discord-youtube-main/bin/cygwin1.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral6
Sample
zapret-discord-youtube-main/bin/winws.exe
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
zapret-discord-youtube-main/bin/winws.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral8
Sample
zapret-discord-youtube-main/check_updates.bat
Resource
win7-20250207-en
Behavioral task
behavioral9
Sample
zapret-discord-youtube-main/check_updates.bat
Resource
win10v2004-20250313-en
Behavioral task
behavioral10
Sample
zapret-discord-youtube-main/discord.bat
Resource
win7-20241010-en
Behavioral task
behavioral11
Sample
zapret-discord-youtube-main/discord.bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral12
Sample
zapret-discord-youtube-main/general (ALT).bat
Resource
win7-20240903-en
Behavioral task
behavioral13
Sample
zapret-discord-youtube-main/general (ALT).bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral14
Sample
zapret-discord-youtube-main/general (ALT2).bat
Resource
win7-20241010-en
Behavioral task
behavioral15
Sample
zapret-discord-youtube-main/general (ALT2).bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral16
Sample
zapret-discord-youtube-main/general (ALT3).bat
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
zapret-discord-youtube-main/general (ALT3).bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral18
Sample
zapret-discord-youtube-main/general (ALT4).bat
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
zapret-discord-youtube-main/general (ALT4).bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral20
Sample
zapret-discord-youtube-main/general (ALT5).bat
Resource
win7-20250207-en
Behavioral task
behavioral21
Sample
zapret-discord-youtube-main/general (ALT5).bat
Resource
win10v2004-20250313-en
Behavioral task
behavioral22
Sample
zapret-discord-youtube-main/general (FAKE TLS MOD).bat
Resource
win7-20241010-en
Behavioral task
behavioral23
Sample
zapret-discord-youtube-main/general (FAKE TLS MOD).bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral24
Sample
zapret-discord-youtube-main/general (МГТС).bat
Resource
win7-20241010-en
Behavioral task
behavioral25
Sample
zapret-discord-youtube-main/general (МГТС).bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral26
Sample
zapret-discord-youtube-main/general (МГТС2).bat
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
zapret-discord-youtube-main/general (МГТС2).bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral28
Sample
zapret-discord-youtube-main/general.bat
Resource
win7-20240903-en
Behavioral task
behavioral29
Sample
zapret-discord-youtube-main/general.bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral30
Sample
zapret-discord-youtube-main/service_install.bat
Resource
win7-20250207-en
Behavioral task
behavioral31
Sample
zapret-discord-youtube-main/service_install.bat
Resource
win10v2004-20250314-en
Behavioral task
behavioral32
Sample
zapret-discord-youtube-main/service_remove.bat
Resource
win7-20240903-en
General
-
Target
zapret-discord-youtube-main/bin/winws.exe
-
Size
160KB
-
MD5
ce31295ca4629486752a0e016b4ad2c4
-
SHA1
3160c21001e83a0a4605a9724184978a83feb39f
-
SHA256
b7d354441b7382eed2cf7dd174e35bc99ea06e7643e12cb79335234f90473795
-
SHA512
37b359c8ec95aafa8e6b89280110bad92ec442ad0126068123b63848949925e03b5564c54cce13f5d8249ae0c550beb255758e9ab74ff962ce40eb770fddc3b9
-
SSDEEP
3072:zcOv6W8ccyHxIHqQRX+u3m9av7WtYgag/IENfeRh2KHz:zcZItim9aDWWgzIQ2RPz
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 2312 winws.exe Token: SeBackupPrivilege 2312 winws.exe Token: SeDebugPrivilege 2312 winws.exe