General
- Target ZIMMY'S AIO.rar
- Size 1.5MB
- Sample260425-tk987sds3w
- SHA256 164b057df0e6149fec600332468650ed99534b8725534e03ec4f75493f391474
- MD5 b53f4819be251e2daf765c66ef070d0d
- SHA1 dc7ee8c1b7e2302a33d990421d861e5bce9f12ce
- SHA512 30efbafb6efdeeaa66506f154d3422479742d2c291282894d931a03f43feab28d7c1e7b61a1fbabb9a91e69b9a8e33427926128705d2ccbb461116eb1280489c
- SSDEEP 24576:bdRtLVxypuMaEiaW9ab952ZdF/2E9yhSYwDwuMF+W5g4wnszsnBPktQ/GnkIxr:bFRxypzW9amZd4dSYL9+E60sB8+ok8r
- TLSH T17075338CDE24739EDE037850B4ACBF18D52A73965E46958EBB2581FDEC202C6C1E4973
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZIMMY'S AIO/Sewi.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZIMMY'S AIO/cheat.dll
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ZIMMY'S AIO/Sewi.exe
- Size 2.1MB
- SHA256 29bdf43af7fce4a48a4699f01ba35a9d23ec72109f9a8d59b84788610066b715
- MD5 2ca19d0f12d1f16f6d08b34c48593826
- SHA1 eb8a5beea1177a71a2123d666638233da57146ad
- SHA512 d9217fd4f397f1a0a81447332f563ece283db881e693034135524937775b7fbb75f97bde586d12f29b3841c4d9811d1b36d64c266fcf08983e2ea83c63d5adbd
- SSDEEP 49152:MKJhzckSniODlvlLyE/r9NCbm1M7nvUoJC+O93+x:M2zckSniCRCbm1MVCru
- TLSH T1A1A59D0172E945B8C22AC179C8039767CB61784E173913FB279899D1BFB13E45ABC7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
- Target ZIMMY'S AIO/cheat.dll
- Size 1.3MB
- SHA256 7e8db116238a3749cd52d05eec13a67c88b34e2d46c7a48c541530c71613b28d
- MD5 8c951a1b85b08fa0e60f340890555537
- SHA1 5a055a2c8d8392bebffa6187da4bf0c92f307ed4
- SHA512 8dbf577a6a4550f417c2658bdd35b1f5d1d2ae6d6833d61845e35dd587f1b6eeaf550d52a3f4b6daa2411e6e644930bd39a95fcef1a7b5ef4a0ec07cef6e0455
- SSDEEP 24576:DGUvZKcKHS+s+FgOS7YKHsXYr467mOHMfendSCkuGKFHenCLYrDMQJ:GcKH1tFgOS7YKHsXvcVHXdInAE
- TLSH T13E55AD06B2E684F9C17B903898ABA74BE6713445073067EB63D04A49AFB37E15B7F311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1