General
- Target ZKBio CVAccess 4.3.2_R_x64_2026-04-21-1721.exe
- Size 846.5MB
- Sample260602-nav4mscx6l
- SHA256 03fde81c2e6e80d9ab503dbf42b287d6c0336b6cee167c7ecec03228595c7b5c
- MD5 a4b902b215ffc9b78f5b089201ba9cd0
- SHA1 fe6138b511ef58c5154bfa8ebecd4be4be9f9894
- SHA512 f70c029a1d2c153d521b8816450d60ef7d3cd0c096a862d427fdd46117a5446c91a67f6169436f5932a5929634c018857165929bf93cc79f68e5415cffe32341
- SSDEEP 25165824:apQ0pOrScqzo9b/MKOKj+uX95KC9hL6lbiSgjC:Z4ySc9b4Kj++F9ZNzjC
- TLSH T12599339FA16BD0CED35D773705A252A0A8734F8E72AACC5797A034058F72578093BE4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target ZKBio CVAccess 4.3.2_R_x64_2026-04-21-1721.exe
- Size 846.5MB
- SHA256 03fde81c2e6e80d9ab503dbf42b287d6c0336b6cee167c7ecec03228595c7b5c
- MD5 a4b902b215ffc9b78f5b089201ba9cd0
- SHA1 fe6138b511ef58c5154bfa8ebecd4be4be9f9894
- SHA512 f70c029a1d2c153d521b8816450d60ef7d3cd0c096a862d427fdd46117a5446c91a67f6169436f5932a5929634c018857165929bf93cc79f68e5415cffe32341
- SSDEEP 25165824:apQ0pOrScqzo9b/MKOKj+uX95KC9hL6lbiSgjC:Z4ySc9b4Kj++F9ZNzjC
- TLSH T12599339FA16BD0CED35D773705A252A0A8734F8E72AACC5797A034058F72578093BE4E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Enumerates processes with tasklist