General
- Target ZimmetTakipSetup.exe
- Size 67.3MB
- Sample260605-ldtzmsd17p
- SHA256 55902c3fb407f9794cbcca8b165a0017d697b5a6725300628e01c443939d3068
- MD5 fdf0a2eaa669cd64abbe977a260046bc
- SHA1 d72f8ee29abf78af4b9c1d3bdb5faf39890cbad9
- SHA512 26a7fc8436ec0caf3ffb43fc5522b15d7669182a6c1fa149ab74f45a70df12e422558ce047a6fb2f17d0dbe98c6685eee59fa2ff57f0d139b9156268d2072271
- SSDEEP 1572864:NYA0nmgPKE1C53Jlzj9z7v6zHXJaNqF5zr70jT7xbksBJuf/IdUEQ4Sp55:NzkpKtj9fMHXJV5zv0jTtbkj3IdUEIj
- TLSH T172F73397E19DA87EE03E4B318AB1D154483B3511AC468E0AC9ECB55CCF652613E3F78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ZimmetTakipSetup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target ZimmetTakipSetup.exe
- Size 67.3MB
- SHA256 55902c3fb407f9794cbcca8b165a0017d697b5a6725300628e01c443939d3068
- MD5 fdf0a2eaa669cd64abbe977a260046bc
- SHA1 d72f8ee29abf78af4b9c1d3bdb5faf39890cbad9
- SHA512 26a7fc8436ec0caf3ffb43fc5522b15d7669182a6c1fa149ab74f45a70df12e422558ce047a6fb2f17d0dbe98c6685eee59fa2ff57f0d139b9156268d2072271
- SSDEEP 1572864:NYA0nmgPKE1C53Jlzj9z7v6zHXJaNqF5zr70jT7xbksBJuf/IdUEQ4Sp55:NzkpKtj9fMHXJV5zv0jTtbkj3IdUEIj
- TLSH T172F73397E19DA87EE03E4B318AB1D154483B3511AC468E0AC9ECB55CCF652613E3F78B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.