General
- Target ZChaos.exe
- Size 13.8MB
- Sample260706-1g59eahs8q
- SHA256 565b8baeb1362609094a9dc16f81523265415536e5444e38522160fb97d94ac1
- MD5 7fdf023d5ffd2833fb751f40263de381
- SHA1 a9eb6db3418853545cc6bba44f8cca7207f1503d
- SHA512 f4a7a9c45a4ace016aef582d413e799e33f90409e1960d7d4d18a9b23f2d42be96b450647da9ca3860cd57c94f3207e8f78475ebf56397977079719f5196966f
- SSDEEP 196608:t3ZCpsNAbQWRZ0b0pYh8e151DP5FO00sAy4jMVI/iW2g2JRc5H2+Fa7JcRlZOfm/:CpdbRZkyP4DD9yeI/AvEW+YIOf
- TLSH T155E6335A6391D19BD0A783306DD74B627770ECA5224362C7E8727B840DBBBD69E403CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZChaos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZChaos.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ZChaos.exe
- Size 13.8MB
- SHA256 565b8baeb1362609094a9dc16f81523265415536e5444e38522160fb97d94ac1
- MD5 7fdf023d5ffd2833fb751f40263de381
- SHA1 a9eb6db3418853545cc6bba44f8cca7207f1503d
- SHA512 f4a7a9c45a4ace016aef582d413e799e33f90409e1960d7d4d18a9b23f2d42be96b450647da9ca3860cd57c94f3207e8f78475ebf56397977079719f5196966f
- SSDEEP 196608:t3ZCpsNAbQWRZ0b0pYh8e151DP5FO00sAy4jMVI/iW2g2JRc5H2+Fa7JcRlZOfm/:CpdbRZkyP4DD9yeI/AvEW+YIOf
- TLSH T155E6335A6391D19BD0A783306DD74B627770ECA5224362C7E8727B840DBBBD69E403CE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry