General
- Target Zensware 1.7.exe
- Size 90.3MB
- Sample260702-2cyt7sfx6t
- SHA256 173d574850f658a8ff667d002f0b817029e121a0e4892e9b5b9216d2362a2e08
- MD5 ec81f18c6d675cec0c1e5138b91a10c2
- SHA1 56f55da031fcde02caaa97ac346d8e05b57f1888
- SHA512 bd333eb04274c989de63c4754810c83b2d253c280e7dd655e35236e9c28a60b3be5b3de3156a083a9160942056bc9102bb3bcf9bcbb534b25c76f6751c735578
- SSDEEP 1572864:l/+QP43kjFMbnpK6swf6LAOX9+dKTrngI7Jf+iHsPRZJUCqT:lGQP4kFBZAm+Og0Jf+iHSRACqT
- TLSH T1A628335ED5E3F01DDB2B39B346C0088277676DF661A251F23A41F8E0E5B6ED13902E92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Zensware 1.7.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zensware 1.7.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Zensware 1.7.exe
- Size 90.3MB
- SHA256 173d574850f658a8ff667d002f0b817029e121a0e4892e9b5b9216d2362a2e08
- MD5 ec81f18c6d675cec0c1e5138b91a10c2
- SHA1 56f55da031fcde02caaa97ac346d8e05b57f1888
- SHA512 bd333eb04274c989de63c4754810c83b2d253c280e7dd655e35236e9c28a60b3be5b3de3156a083a9160942056bc9102bb3bcf9bcbb534b25c76f6751c735578
- SSDEEP 1572864:l/+QP43kjFMbnpK6swf6LAOX9+dKTrngI7Jf+iHsPRZJUCqT:lGQP4kFBZAm+Og0Jf+iHSRACqT
- TLSH T1A628335ED5E3F01DDB2B39B346C0088277676DF661A251F23A41F8E0E5B6ED13902E92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.