General
- Target zen.installer.exe
- Size 90.2MB
- Sample260628-thjcpsat4q
- SHA256 72b93a2146cc8a28309edc2ae9f5f0f5aead1da9b00c66995fd030ad0cd443f7
- MD5 b1f07c9525b9fa955b19ec97c3a49698
- SHA1 37cef5ebf96b35bad74a97d457b1a838f59e6b24
- SHA512 ed6ba950a2eae9fe7bda41e16f09dc1ae1e2c706760f1c66d0603f5b726b03908deae89eaa1fe6f69b146ae026c3fa405d0e8178a6645aa3e241e0ea521c7761
- SSDEEP 1572864:nqvb7Q28dqWO2ceUpQPAsKSS7+8SF3TdRkylj8P3agoMu0ug70DZtNSEwVVwH3PN:O7SqWO2Gp7sJz8SFjdRO3agoZXLNV9H1
- TLSH T1D22833ADA2CF0AEBF87361315C71F8F737A10184A9F8875B2C2B729480A15C77616D97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
zen.installer.exe
Resource
win11-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target zen.installer.exe
- Size 90.2MB
- SHA256 72b93a2146cc8a28309edc2ae9f5f0f5aead1da9b00c66995fd030ad0cd443f7
- MD5 b1f07c9525b9fa955b19ec97c3a49698
- SHA1 37cef5ebf96b35bad74a97d457b1a838f59e6b24
- SHA512 ed6ba950a2eae9fe7bda41e16f09dc1ae1e2c706760f1c66d0603f5b726b03908deae89eaa1fe6f69b146ae026c3fa405d0e8178a6645aa3e241e0ea521c7761
- SSDEEP 1572864:nqvb7Q28dqWO2ceUpQPAsKSS7+8SF3TdRkylj8P3agoMu0ug70DZtNSEwVVwH3PN:O7SqWO2Gp7sJz8SFjdRO3agoZXLNV9H1
- TLSH T1D22833ADA2CF0AEBF87361315C71F8F737A10184A9F8875B2C2B729480A15C77616D97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1