General
- Target zeninCRACK 0.39.1.exe
- Size 2.5MB
- Sample260709-3l24naay4p
- SHA256 1eb5623da759b75e1d8a0fa137163c9e05ed8c839a2403347df31c004e40962f
- MD5 65381edf05067f0bbdf574ca274296f9
- SHA1 dd3a18e1448e8073067eac2b6f768bc681857625
- SHA512 b11c535dc6bc21daa2709a5795e429a6acce5bf27015a1e46803483eead49d4bec5b8d80035dea19be2f3306b003c00ec640a4aeea5aa75673791aa91e6b96da
- SSDEEP 49152:7zf6V1jqp9ekTD5SxfHLqY+xKkmyLW5RhM0gl8:7zyV0pmfOtIFIl8
- TLSH T119C5E122F3918837D55326345D4B93D86926BF201E2858877BE93E4CAF367C27839367
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
zeninCRACK 0.39.1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
zeninCRACK 0.39.1.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target zeninCRACK 0.39.1.exe
- Size 2.5MB
- SHA256 1eb5623da759b75e1d8a0fa137163c9e05ed8c839a2403347df31c004e40962f
- MD5 65381edf05067f0bbdf574ca274296f9
- SHA1 dd3a18e1448e8073067eac2b6f768bc681857625
- SHA512 b11c535dc6bc21daa2709a5795e429a6acce5bf27015a1e46803483eead49d4bec5b8d80035dea19be2f3306b003c00ec640a4aeea5aa75673791aa91e6b96da
- SSDEEP 49152:7zf6V1jqp9ekTD5SxfHLqY+xKkmyLW5RhM0gl8:7zyV0pmfOtIFIl8
- TLSH T119C5E122F3918837D55326345D4B93D86926BF201E2858877BE93E4CAF367C27839367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10UAC bypass
Event Triggered Execution: Image File Execution Options Injection
Adds Run key to start application
Checks whether UAC is enabled
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Image File Execution Options Injection
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3Pre-OS Boot
1Bootkit
1