f34c4786c38ebf0e8da05e2369ab8c8b98835c6107cfa2cfd7ef989daaeab9e4 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

ZenithMacros.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
ZenithMacros.exe
Size 168.8MB
Sample260620-rl6lasgy3s
SHA256 f34c4786c38ebf0e8da05e2369ab8c8b98835c6107cfa2cfd7ef989daaeab9e4
MD5 7cd49abaffb39d8d2208d4e0edc1ce0b
SHA1 3b49a1699dd504782fd76879cd0755e999bdf772
SHA512 693daada3576b437bdb90f2e112e15bb87fd25a44afe9f9198e5fa2fd1d41bc6404a76a35d1e8b4729dd667b2f77b801affb1c00a0fb3015b7733c4e6af43be4
SSDEEP 1572864:jMw5SJUgPbksdRW8YcrVEGPv/fNsYCdwl0KWCfLM14GYoQt0imGWgyTpQGa:HunRK2agyVQ1
TLSH
T17B888C13E29A50D9E00DD1B187879233EA72B84A4728B6DF2B5447563F77EE42B3DB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation ransomware spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ZenithMacros.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

25 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation ransomware spyware trojan

Malware Config

Targets

- Target
  ZenithMacros.exe
- Size 168.8MB
- SHA256 f34c4786c38ebf0e8da05e2369ab8c8b98835c6107cfa2cfd7ef989daaeab9e4
- MD5 7cd49abaffb39d8d2208d4e0edc1ce0b
- SHA1 3b49a1699dd504782fd76879cd0755e999bdf772
- SHA512 693daada3576b437bdb90f2e112e15bb87fd25a44afe9f9198e5fa2fd1d41bc6404a76a35d1e8b4729dd667b2f77b801affb1c00a0fb3015b7733c4e6af43be4
- SSDEEP 1572864:jMw5SJUgPbksdRW8YcrVEGPv/fNsYCdwl0KWCfLM14GYoQt0imGWgyTpQGa:HunRK2agyVQ1
- TLSH
  T17B888C13E29A50D9E00DD1B187879233EA72B84A4728B6DF2B5447563F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation ransomware spyware trojan
- Downloads MZ/PE file
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

SIP and Trust Provider Hijacking

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalationransomwarespywaretrojan

© 2018-2026

Terms | Privacy