General
- Target zitra.exe
- Size 7.0MB
- Sample260701-wc8frabv6j
- SHA256 082f6a540a074d16690fe3657ec97279d2cd02be1c38d343561bd795241ddaa6
- MD5 dc8581190bf964cdae24bbc23d970fe9
- SHA1 5b30781c191e2510b8b68aff84a8cb9f39c65f38
- SHA512 74da414fd1d515566116d9972ccff8036cdc905e7cc4384d9fd05963b5a8120a9cdd0ba8d6e50262f50293b176c05c3bc1e91491aecd677309ddfb932d97caaa
- SSDEEP 98304:987VMk1nW7Rv+G1a5i9afybsMq03y3yLfJ98C/RAhstOn4:OJ/GIybsx03OyLDHRkstU4
- TLSH T170769E03F2A581ECC46EC1B9C35AA637EB72B88D163172AF5BE44B212F16F506B1D315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zitra.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
zitra.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target zitra.exe
- Size 7.0MB
- SHA256 082f6a540a074d16690fe3657ec97279d2cd02be1c38d343561bd795241ddaa6
- MD5 dc8581190bf964cdae24bbc23d970fe9
- SHA1 5b30781c191e2510b8b68aff84a8cb9f39c65f38
- SHA512 74da414fd1d515566116d9972ccff8036cdc905e7cc4384d9fd05963b5a8120a9cdd0ba8d6e50262f50293b176c05c3bc1e91491aecd677309ddfb932d97caaa
- SSDEEP 98304:987VMk1nW7Rv+G1a5i9afybsMq03y3yLfJ98C/RAhstOn4:OJ/GIybsx03OyLDHRkstU4
- TLSH T170769E03F2A581ECC46EC1B9C35AA637EB72B88D163172AF5BE44B212F16F506B1D315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger