8daca3ebcb615c264eb7542a7c92779cdac524911afd85916aef28d68eff5618 | Triage™

Login
Reports

Overview

overview

8

Static

static

4

Release (1).zip

windows10-2004-x64

1

Release (1).zip

windows11-ltsc_2024-x64

1

SubZero Sp...s.json

windows10-2004-x64

3

SubZero Sp...s.json

windows11-ltsc_2024-x64

3

SubZero Spoofer.exe

windows10-2004-x64

1

SubZero Spoofer.exe

windows11-ltsc_2024-x64

8

SubZero Spoofer.exe

windows10-2004-x64

1

SubZero Spoofer.exe

windows11-ltsc_2024-x64

1

SubZero Spoofer.pdb

windows10-2004-x64

3

SubZero Spoofer.pdb

windows11-ltsc_2024-x64

3

SubZero Sp...g.json

windows10-2004-x64

3

SubZero Sp...g.json

windows11-ltsc_2024-x64

3

runtimes/w...ml.dll

windows10-2004-x64

3

runtimes/w...ml.dll

windows11-ltsc_2024-x64

3

runtimes/w...me.dll

windows10-2004-x64

3

runtimes/w...me.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Release (1).zip
Size 1.8MB
Sample260622-ble6cag12t
SHA256 8daca3ebcb615c264eb7542a7c92779cdac524911afd85916aef28d68eff5618
MD5 14b397954778c4eb62515af3377a964a
SHA1 08036d759d45c293dd19f1b6ac246d8a9dbcabd9
SHA512 5037ad0cc79dfbddd177eb8b4f425af311d8d3778bbb98102e829281f7e7890ef2ebce3c9d9e7b527a1c1b790e423bde0eaff66957c758b602cff1bd8fa38e1f
SSDEEP 49152:fxI3nrKBoX0ljwVZwRXONKJd6MIRWypg/8+MZZPsq:fxI3eE0lj2M+NE5Inpl+MIq
TLSH
T1A48533F20E0CA9EFF168F2B67CB840BED7259B3C760ADC4E42611B4C19A2565767413B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware costura discovery packer persistence ransomware spyware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Release (1).zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

Release (1).zip

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

SubZero Spoofer.deps.json

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral4

Sample

SubZero Spoofer.deps.json

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

3 signatures

600 seconds

Behavioral task

behavioral5

Sample

SubZero Spoofer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

SubZero Spoofer.exe

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

14 signatures

600 seconds

adware persistence ransomware spyware

Behavioral task

behavioral7

Sample

SubZero Spoofer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral8

Sample

SubZero Spoofer.exe

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

1 signatures

600 seconds

Behavioral task

behavioral9

Sample

SubZero Spoofer.pdb

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral10

Sample

SubZero Spoofer.pdb

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

3 signatures

600 seconds

Behavioral task

behavioral11

Sample

SubZero Spoofer.runtimeconfig.json

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral12

Sample

SubZero Spoofer.runtimeconfig.json

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

3 signatures

600 seconds

Behavioral task

behavioral13

Sample

runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.UI.Xaml.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral14

Sample

runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.UI.Xaml.dll

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

1 signatures

600 seconds

Behavioral task

behavioral15

Sample

runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral16

Sample

runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.dll

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

1 signatures

600 seconds

Malware Config

Targets

- Target
  Release (1).zip
- Size 1.8MB
- SHA256 8daca3ebcb615c264eb7542a7c92779cdac524911afd85916aef28d68eff5618
- MD5 14b397954778c4eb62515af3377a964a
- SHA1 08036d759d45c293dd19f1b6ac246d8a9dbcabd9
- SHA512 5037ad0cc79dfbddd177eb8b4f425af311d8d3778bbb98102e829281f7e7890ef2ebce3c9d9e7b527a1c1b790e423bde0eaff66957c758b602cff1bd8fa38e1f
- SSDEEP 49152:fxI3nrKBoX0ljwVZwRXONKJd6MIRWypg/8+MZZPsq:fxI3eE0lj2M+NE5Inpl+MIq
- TLSH
  T1A48533F20E0CA9EFF168F2B67CB840BED7259B3C760ADC4E42611B4C19A2565767413B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  SubZero Spoofer.deps.json
- Size 56KB
- SHA256 8cf2d6e12d4180b2d0ffe78a6ad4b7545fbea99f6009b73bd2262c9d97a122ff
- MD5 e59a7f51fc845b26476ba7cdd7bb0e94
- SHA1 b57d4d4c13b097d66ed74b1aa20f31c17d7139ce
- SHA512 d86b6bb856741437d5526b0dfcc249d54668476476d419ed072671c2378d05216ea26799f00c0a9606367ed84e5f6b6bed20ec351eb297e10c38c19fc24c9f7c
- SSDEEP 768:YElcu7EJBuR6ML1O/1u33ZHZsSBDzW0YQw:Jlcu7EJBuR6ML1O/1u33ZHZsSBDlYH
- TLSH
  T1B5436726DB88A8E30A766B921830C092F361832F51106DDE79FC118EDF77E871275B76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  SubZero Spoofer.dll
- Size 1.7MB
- SHA256 12fa7e727a9cac9f64d8b04d0048ab29b23c127aaa8a4c424e8e1f13de02e995
- MD5 8b379b5a89444d79466ea1535136d54b
- SHA1 82581003fff6b266ae6a69f4c193d0fabbec0275
- SHA512 9594cc6c02e0c8a4d0f4d605d4d1ad324a645e18a2e6dd88ae7aafd502fd5f3937e4a829b01ff9b73c0834d51b68c021e64204df840473d165559c4d0af69db9
- SSDEEP 49152:frgBWBKH8jkDVFCNXODzWS9HfX0HII8Pg:E+KH4kpc+DX/0HII8P
- TLSH
  T1E28523E132989F6AE07DA3F994B640148BB27F2F2451DAC8CDD826D504B2710CA597FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  SubZero Spoofer.exe
- Size 144KB
- SHA256 8eb725c0d1be978e726616611c95fff620531669f41f0f3b496f6c06b1c77a0d
- MD5 4041fd309b1bcd33019394b0a00dbc30
- SHA1 50d45b1e72eaecbf8f74d19fb8641cd642a74423
- SHA512 499ed8a2ba56e4196ad10de36ea3434d4869f193a5c06662c81e73772bc2a4420d4c58e394bcaed4e131795c53838ec07857de671c8d4049d2a05f980e880f73
- SSDEEP 3072:O8vbzyQ6Y1YXrbNK+3FNxacPEMk6rRQAMTWS:OszAXNK+3FVHRQXTW
- TLSH
  T1C8E32817B2AD11F9D1ABE23C89A24A06F7767826473597CF0390463A0F77BE09E79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  SubZero Spoofer.pdb
- Size 32KB
- SHA256 edf21c7de68fec9a5d7629b94fed3ad9575b766574995966f39ba96efacb50e0
- MD5 5c698c176ef99aedac20ed84e213bdbf
- SHA1 c0e8174bbcbfdf05b677ce847e2ba1db0698306a
- SHA512 1ee4e6d21815d2fec2865e0829a81b99b0550c804ff6e3e8bd53b430f6126bb534314cfca028f7c941dc66d8d1e6db1a7999ae57f9f811f8d337c81d3d1f4665
- SSDEEP 384:LQyllLlD3m/0POOHFf+QUP2bhakR01Mq330uquon7oUK7E6RxI+HLfQycoEsHZZM:0yllLlDH2Wu2qNHPeno0v/P+2lsA
- TLSH
  T14CE28122D3D4CD11CB41763B8532C319B6B4C2696209CFAAF1D4966DE8EF7E44FB9260
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  SubZero Spoofer.runtimeconfig.json
- Size 266B
- SHA256 321b4e463bbacd6113aa337511bdebf5e7356e9971744346b28424607c7b483a
- MD5 d720176a229e9d969b40fabeb0baf62e
- SHA1 f2d8e97a6c6098a10dd80553eaaef7547ad32ba3
- SHA512 0844f9aca147014a68248c43310bf97e0a0a3679fc84650aa0a27aa09f70f56fa071c0ace1be80f0e33ce4dd3f865eae11e946d98d21af916dc1a7f945acaba0
- TLSH
  T136D0A93BC9508CB328F92BB6D23AC281FF24071B11804E2A32BC000C1FB6A630100F84
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral11 behavioral12
- Target
  runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.UI.Xaml.dll
- Size 39KB
- SHA256 884442e44bcef27d917e5de5b69cbd4a297830e0b98b84495c7ab7486fa47332
- MD5 7141c72e54fe9a7ed39ef89814de67d9
- SHA1 bccef028036224c6f0bb168d104d0f6adb186dc5
- SHA512 9d3a1da9f050dd7df26f3a35dcfef5766adf4d3627b9d28a57359414b1d67aee7a8b6176674a01a5a3b099e21be5ce9d3c911af42fe5150469e37ff8a92a7efb
- SSDEEP 768:XFUvumWzh6pCPtrpeHWGj45ZOo2HNB+LXDPp8vkyFww8L1v:XSIzDW2Gjjk7akyFwBxv
- TLSH
  T119033BC947DCC32BDBAE6B79A865A6079F31F36A5212F76708E4E0B869133D10904397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  runtimes/win/lib/netcoreapp3.0/System.Runtime.WindowsRuntime.dll
- Size 130KB
- SHA256 be26699765f700a29c3928e10f6d1e02a297dff3ba6eb7afb6ec41003cb3d665
- MD5 0198a79063c865ed21c95b7400ddd9fc
- SHA1 b56b4bc0760914149e8d43288d5c151b7fb8ab43
- SHA512 fa77da06a33ae646f69dcadeaeb71524a91cbdd1e9d8008c5fa278039bede09dab87b74765ff5fdf133a4f864d2a324659618d58a30e7dd165408b1c3be889ef
- SSDEEP 3072:zmhU+vMwoh1Zz+Wzvo3Z/O6ZFJX3JhKLqAOd:zgU+Ewmz+W7m/DFJXvKe
- TLSH
  T187D37B11A7FC0B1AE7EF6B39B17552024B32FD96A912E75E244C90FC1867BC149613B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

adwarepersistenceransomwarespyware

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy