General
- Target ZYNX_AIM_OPTIMIZER.exe
- Size 19.3MB
- Sample260627-xjsjjscy2x
- SHA256 20510599d1e6c98c114ac74607e72fd01804af7eda70e24f94b8edba42456cd5
- MD5 df95b59a586a7d3cf14549b53398af7e
- SHA1 58321c5b5cf1d4c4d35435f704cc211aff261207
- SHA512 f9a370829ec195ad5e57dcbfe48b9a853b012270c3b42f9abd3bcffb2013a93761ebd4e8d5644f5766ad3019d830c553605f9473bb0d51ce8f8c5d88f172af28
- SSDEEP 393216:Jbiodjs14bMgLc9zGdGth9hP21F9URkXEAphVtnIUQSg+xeXjo0OCvFgtm:Q2G4TLcNOitEvjRphDto+xajo07vFg
- TLSH T18B1733887B9119E4F4AB443DACC1CA1392F2B9612FA0D2DB27B24D580D376C5DE74B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ZYNX_AIM_OPTIMIZER.exe
Resource
win10v2004-20260513-en
14 signatures
600 seconds
Malware Config
Targets
-
- Target ZYNX_AIM_OPTIMIZER.exe
- Size 19.3MB
- SHA256 20510599d1e6c98c114ac74607e72fd01804af7eda70e24f94b8edba42456cd5
- MD5 df95b59a586a7d3cf14549b53398af7e
- SHA1 58321c5b5cf1d4c4d35435f704cc211aff261207
- SHA512 f9a370829ec195ad5e57dcbfe48b9a853b012270c3b42f9abd3bcffb2013a93761ebd4e8d5644f5766ad3019d830c553605f9473bb0d51ce8f8c5d88f172af28
- SSDEEP 393216:Jbiodjs14bMgLc9zGdGth9hP21F9URkXEAphVtnIUQSg+xeXjo0OCvFgtm:Q2G4TLcNOitEvjRphDto+xajo07vFg
- TLSH T18B1733887B9119E4F4AB443DACC1CA1392F2B9612FA0D2DB27B24D580D376C5DE74B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies boot configuration data using bcdedit
-
Loads dropped DLL
-
Stops running service(s)
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1System Services
1Service Execution
1Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Power Settings
1