General
- Target ZydraOptimizerV2.exe
- Size 49.0MB
- Sample260527-e4et3shv9t
- SHA256 7be326ae8f52db52940a39350562d5d6b39051f0536cb61e9c4852cdefa50bb2
- MD5 1308106ff56f58f9e476ef923112b7c8
- SHA1 2efe153ea5a44593262350556b879a1a1f694d22
- SHA512 5c8d48508654c5dbb37005b5e7923b0af2aa1b606b90833fa590feb1fe3ac439d60bcccc2d0d1d7683c0ae34fc7dd8a610db1ceb925a86a2a823e187a5a3d6ab
- SSDEEP 1572864:t9zpTbci+8PkxEW1KYFzFF/iIiK4QBzRvH6Z+LzHqzGiCtSbIBDm:t9NbUqkEWpRpv4QlwILzKzRUBDm
- TLSH T1D4B733D99281086BE4E50236D2DBC53DDD42F9CAE745C48F8A6069D70E4BBE6893FF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
ZydraOptimizerV2.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target ZydraOptimizerV2.exe
- Size 49.0MB
- SHA256 7be326ae8f52db52940a39350562d5d6b39051f0536cb61e9c4852cdefa50bb2
- MD5 1308106ff56f58f9e476ef923112b7c8
- SHA1 2efe153ea5a44593262350556b879a1a1f694d22
- SHA512 5c8d48508654c5dbb37005b5e7923b0af2aa1b606b90833fa590feb1fe3ac439d60bcccc2d0d1d7683c0ae34fc7dd8a610db1ceb925a86a2a823e187a5a3d6ab
- SSDEEP 1572864:t9zpTbci+8PkxEW1KYFzFF/iIiK4QBzRvH6Z+LzHqzGiCtSbIBDm:t9NbUqkEWpRpv4QlwILzKzRUBDm
- TLSH T1D4B733D99281086BE4E50236D2DBC53DDD42F9CAE745C48F8A6069D70E4BBE6893FF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.