4fcf736b8ad96dcac7df30572f67e2a7c27a12ab11bc72ca1da75012fff98794 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2.0.4/LICE...m.html

windows10-2004-x64

3

2.0.4/LICE...m.html

windows11-ltsc_2024-x64

3

2.0.4/d3dc...47.dll

windows10-2004-x64

1

2.0.4/ffmpeg.dll

windows10-2004-x64

1

2.0.4/ffmpeg.dll

windows11-ltsc_2024-x64

1

2.0.4/libEGL.dll

windows10-2004-x64

1

2.0.4/libEGL.dll

windows11-ltsc_2024-x64

1

2.0.4/libGLESv2.dll

windows10-2004-x64

1

2.0.4/libGLESv2.dll

windows11-ltsc_2024-x64

1

2.0.4/reso...w.html

windows10-2004-x64

3

2.0.4/reso...w.html

windows11-ltsc_2024-x64

3

2.0.4/reso...w.html

windows10-2004-x64

3

2.0.4/reso...w.html

windows11-ltsc_2024-x64

3

2.0.4/reso...w.html

windows10-2004-x64

3

2.0.4/reso...w.html

windows11-ltsc_2024-x64

3

2.0.4/reso...w.html

windows10-2004-x64

3

2.0.4/reso...w.html

windows11-ltsc_2024-x64

3

2.0.4/reso...ags.js

windows10-2004-x64

3

2.0.4/reso...ags.js

windows11-ltsc_2024-x64

3

2.0.4/reso...ain.js

windows10-2004-x64

3

2.0.4/reso...ain.js

windows11-ltsc_2024-x64

3

2.0.4/reso...log.js

windows10-2004-x64

3

2.0.4/reso...log.js

windows11-ltsc_2024-x64

3

2.0.4/reso...app.js

windows10-2004-x64

3

2.0.4/reso...app.js

windows11-ltsc_2024-x64

3

2.0.4/sett...w.html

windows10-2004-x64

3

2.0.4/sett...w.html

windows11-ltsc_2024-x64

3

2.0.4/vk_s...er.dll

windows10-2004-x64

1

2.0.4/vk_s...er.dll

windows11-ltsc_2024-x64

1

2.0.4/vulkan-1.dll

windows10-2004-x64

1

2.0.4/vulkan-1.dll

windows11-ltsc_2024-x64

1

2.0.4/zEro64.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2.0.4.7z
Size 58.0MB
Sample260718-jnw6mscy2p
SHA256 4fcf736b8ad96dcac7df30572f67e2a7c27a12ab11bc72ca1da75012fff98794
MD5 51fc68f5f9a86267e759e39148176d9d
SHA1 a414e4eb560e1d8a673aa1bc65a7af279a39dccd
SHA512 37b8898248acd6ebdc72fd044dd4290f90d153a1398535c577ab3e445b0e88b634c84fe9295eb1c618067942e08230b8d7116fb79e8e3b69c9c3064e13facf65
SSDEEP 1572864:xIv0cuy4HTY0hQhBSuH3Nxk8FtdXJTTkt:KXuykTY0hQhJH3Nxj1Xtg
TLSH
T1F4D73397744BFDB7EEE421388555E0649C478B38ECFD25A04769ABD6B24FBC2700886C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2.0.4/LICENSES.chromium.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

2.0.4/LICENSES.chromium.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

2.0.4/d3dcompiler_47.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

2.0.4/ffmpeg.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

2.0.4/ffmpeg.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

2.0.4/libEGL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

2.0.4/libEGL.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

2.0.4/libGLESv2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

2.0.4/libGLESv2.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

2.0.4/resources/app/extensions/roomlist-preview.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

2.0.4/resources/app/extensions/roomlist-preview.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral12

Sample

2.0.4/resources/app/extensions/scoreboard-preview.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

2.0.4/resources/app/extensions/scoreboard-preview.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral14

Sample

2.0.4/resources/app/extensions/settings-preview.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

2.0.4/resources/app/extensions/settings-preview.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral16

Sample

2.0.4/resources/app/extensions/welcome-preview.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral17

Sample

2.0.4/resources/app/extensions/welcome-preview.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral18

Sample

2.0.4/resources/app/hxd-early-flags.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

2.0.4/resources/app/hxd-early-flags.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

2.0.4/resources/app/main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

2.0.4/resources/app/main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

2.0.4/resources/app/startup-bootstrap-log.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

2.0.4/resources/app/startup-bootstrap-log.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

2.0.4/resources/default_app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

2.0.4/resources/default_app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

2.0.4/settings-preview.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral27

Sample

2.0.4/settings-preview.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral28

Sample

2.0.4/vk_swiftshader.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

2.0.4/vk_swiftshader.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

2.0.4/vulkan-1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

2.0.4/vulkan-1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

2.0.4/zEro64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion spyware trojan

Malware Config

Targets

- Target
  2.0.4/LICENSES.chromium.html
- Size 5.1MB
- SHA256 fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
- MD5 6b84319ee8a0a0af690273d3d2dcbaf4
- SHA1 857ca353e0582d100dcbc6cb6761bb4430d0cb90
- SHA512 26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
- SSDEEP 24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
- TLSH
  T1D046D66BBB49037316F282626B4AA4CAF31E903F375A1514345CD15C2B7BA2483FF69D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  2.0.4/d3dcompiler_47.dll
- Size 4.3MB
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH
  T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  2.0.4/ffmpeg.dll
- Size 2.6MB
- SHA256 39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08
- MD5 7c3c780de9ae5cc4abeccbd7cb6b367b
- SHA1 bda27b3c0b1ec023e2a0a97099a84b10e04cb135
- SHA512 80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c
- SSDEEP 49152:8MnbcrH9v7eCZPxX+qzohT99hDoapghnshy43yBcxnyKbZtjB0HVEMGJSj/8NOv:dCZpX+q27saesDSjbv
- TLSH
  T17CC59C17F6A644EDD02DC57483AF9233F93078454724A6EF2A809A252F7BFD06A7E314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  2.0.4/libEGL.dll
- Size 429KB
- SHA256 23046e7fe2bbf76ee2c5596b6beac723ad465fdbaa44266486102cdb292148a1
- MD5 b3017453d487a7d33445c1d2d9b9bc13
- SHA1 7e643ccb8984a4a92dd439eeb4bdaaeb62bd8862
- SHA512 fd583f4b95aa974d72628bcc548feb22bc86c5ab0fd1536995bd796e28422f56e6799d60e2c3bef9aed9a1080eaf12338a3b29b8c3d40ba5166030a219572baf
- SSDEEP 6144:67Udu1o3YnElXvzYhRk9o+3Re3wpcOQy5n+t7dPs:wUdu1NElX7QR2osJ5+XP
- TLSH
  T1B2947D15F79048B9D076C078CA634642DE72B8DA0F64EADF139492692F7BBE45F39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  2.0.4/libGLESv2.dll
- Size 7.6MB
- SHA256 dd74029716da56a0e4b64bc5cea0c169e1c4b31143ff39213d3c544792e8f2b9
- MD5 dd8d815769cbf46af41a41931e9b4572
- SHA1 f242fcc4cfd5030f3f543c22f141185cd86e7142
- SHA512 69a12f862157746ffc27b637941261a0c5c494175c3e674c7de4d0c4452a5b9358735944e8e0568b7279a7791cf178c9b1afd5ea4a781e93f28cd775a0a6096f
- SSDEEP 98304:p5a6GJCIf2Knqdu5iIBIcbWwYSqARSHoDNSv:pKIwBqARSH
- TLSH
  T1FC866C07E2A040DDE00DC1B9875BB222EA31BC491B64B6DF269477112FB7FE06B7A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  2.0.4/resources/app/extensions/roomlist-preview.html
- Size 134KB
- SHA256 d4e4190fae5984f147cce11dd1fb568d49c7256336a01c1c89f887050b3084a8
- MD5 c350f2f78044666160c33c8edf07b3e4
- SHA1 29d488ca3ba7961056e8d3ed82f31a531fabac57
- SHA512 49a1864e5a30684f88123d12888d326bb7b03bd95a8e7e981edc5b8a9fe88e13c6a387041adf31af9e210fe3f513cd728924be2c7b23309be53db0c56f67a680
- SSDEEP 1536:ZzqMBhlFIrP2wqwmepraczM71yi1D+XoewwaViyCkyK1mzISPQAB25fSY9z4bJc1:JoJnBTU8wS7bJsjnDX
- TLSH
  T172D3F9AEFDB3107A582772BD67EF5B05366890038106DD107D9CD2184FC4EE896BABD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral11
- Target
  2.0.4/resources/app/extensions/scoreboard-preview.html
- Size 18KB
- SHA256 b4172f597aca83ac6248776b98d53049777fe335e67f1e220d58a0d43f957924
- MD5 f00a40c8cca4da09df2a49776a0b5055
- SHA1 f3c97cc239e4a0f744d1a3681d6e1ab494e39883
- SHA512 5295f0c1767b5ac6185c806f74ea48608d22635c4256a2edb2993b7b6b5d6850a1d68a72519387d5d79b42364f42fc1dcead771b5c7f35c627fce24192a56355
- SSDEEP 192:4Rnd9kR4xxbjm39/a5UqRvGqH1vR0NhmIqDJwKfKb4r5atp7fXqVMydS9mpiz6Q9:4Rd91xoQQaE3/r7Xt5sop3vdL
- TLSH
  T12182976DBAB31539281790B96FEF62053329B0139706DC18BFDC52D8CF856E855A3F88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12 behavioral13
- Target
  2.0.4/resources/app/extensions/settings-preview.html
- Size 248KB
- SHA256 555800d4f31d8a02ef9395789a35421cdbb3cf304515b19ca20802ddf9c5f1cb
- MD5 f17113b51cd36f9fe90fefb571e41581
- SHA1 c746b7b80b986414aa6069c853c93171d4b69adb
- SHA512 6e6a91f8de464a8ea44bc57c8bd71df8b9635aa463babc05ee16f63fb575e31598cbbdadd248ac7a15d238e1a2b5c00ad3462684877d78f64e0aba12772938cd
- SSDEEP 3072:1yIfiRNh+kDHslJD4hZyQk8UXbAsxc/LYEoW:DkhEQk8
- TLSH
  T18144C79A6EF320758C6360BEDBFFAA067276A0438205DD10FD4C96541FC45B892B6BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14 behavioral15
- Target
  2.0.4/resources/app/extensions/welcome-preview.html
- Size 72KB
- SHA256 060e4dedf16ca0cfe684230ff8e48c94d2bb1f160d04ef8fb7a0a986bc6275bd
- MD5 3304856bbffaeff944d282407e2c8854
- SHA1 ac7dd02b314fbf88d3c1cbc7f9a329a8b9ab40b4
- SHA512 b3a67a59af9fab28374d1031f46e1f21ecec73ed70dd4209bfdd3efcd3ab36a065f3ad3e8ff72ad6c30516187a8e9bcc310e63ac2e942b9800dadb59b0d2891a
- SSDEEP 1536:Zxxe24O+y2jwFaNDgYwjX02rNISE0Qj9H3:PIDLwfU5H3
- TLSH
  T19873C77165F20436098393D9B36E571B3B64F147DA0AC5057AAD8BF40F8ACE8D82BE5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral16 behavioral17
- Target
  2.0.4/resources/app/hxd-early-flags.js
- Size 5KB
- SHA256 04720e29fd874c265b775594107f37b3eb30d7c4f0aaf2285c8575617f3dcab7
- MD5 231b2ae36e1526f9ed42aa148c40e1d2
- SHA1 3f8bea916dd077939b8a9a001ac50f7adfac7c6c
- SHA512 75e52329e46a3255c7a71ad33374f2e7f51c8fd133ae889e0535074755d3f0a873d0601b3ffdd27f28e27305c5b810c87903d7a19e2d41da2c136fda866ce602
- SSDEEP 96:uqCee9VlEcVq5BEWDitIXIQIajMBReabYvIvINFIrAIpbOaI0dIjy4I1LI/KzIa4:uptVlEOqMPtikajMBMabYvW8aAGFe928
- TLSH
  T1E6C1409AA8FB21308D47611D0B2F6046B636C573166EDDF07DADB27C5F8962009B2F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  2.0.4/resources/app/main.js
- Size 1KB
- SHA256 02e6e3f065eb4b3f9194a2a1391e99aa8afd1db98b8764c216ba34b1e99ca956
- MD5 aaf4438696a8324d42ccd6d2cdc59589
- SHA1 e54af2372b3c861216603297c3258881fe0546c3
- SHA512 36a3fb71ac8874f935862eba53a1d87d2dbc70b340926b9b1fb244d1c3a818cc9ebff3ccebf7c76272f0aef110a5f6acda73c09fff4a033b56f4a5219f244487
- TLSH
  T198213FA94CDD7AD1D32233D4453BCA0FBEE28177020292C0F2ACE6C96FA080092724BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  2.0.4/resources/app/startup-bootstrap-log.js
- Size 5KB
- SHA256 4865f71973860d7efd9f039970e0714c5465ed16b42d4362455453a9be33880a
- MD5 25d9e94d0bbce1e90124d1089e4373ab
- SHA1 abf8436903238d07da712d3c95a666adaabf0788
- SHA512 8923469fb98fce65b3e250f56861816d2981927227e292f47f24b93a12781cda3c21414f067032017a8027a2cb666f702db6c89ea7dfd1232d5374a39ca4581e
- SSDEEP 96:vPJVopVQluFDIQBnu3Z6fVumhxz7JA7JhULgcLVG4eYxGI5wJeo/Tu:vPJWfQluD30AV3hVO7XcLkmxbwP/Tu
- TLSH
  T1E0C10E2AA5F6212CD833321DA77F90173066C4B3022ADAF0BDDC4B6D5FA453C9122B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22 behavioral23
- Target
  2.0.4/resources/default_app.asar
- Size 106KB
- SHA256 025a1f9b329898bf679c17af62e5535d7969ac3e0479db2ffe09ddfb07b9da02
- MD5 e099bbc2071dab16a2dc5e5e4a8f0c41
- SHA1 8f9f3c3c66db03ee48ffdfb8536c31991af96ed6
- SHA512 a16945715e57bd8ba1eb155030211e653cb2c71cf5b489d0c1cd52f35d4ca6d76e321cb4a61920a31ec41942af31c48f6b8d46eca24483a1b00cbf648dd185df
- SSDEEP 3072:nLvTvFRWrjXxs8xbKNkCeF1SBRbFdPQrZsHtxnWF:nz5R4XxRYmS7orZsHtxQ
- TLSH
  T15FB3E04012F11231D86F4AFE9FAF56367A392413728DD4C4722E97609FA19D2A9D3BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  2.0.4/settings-preview.html
- Size 86KB
- SHA256 564bb8cfbc8628f85ee2e32f87dd281ab09a0b58ab9fe2b7f4a36eac8c43fc4b
- MD5 c18496de1e0e3239afd139cacb59ac4a
- SHA1 6cd86650998bfedc1d96a9343b98eba60fd0e7a8
- SHA512 40857ae3b6e72beddd75b128165621935aa9a8c3c569bc21ce60b3988d677aabd427d6a8de6bd3579cb953a9a00deb2dc8877718f06cb7c80c20b186e2bdaf97
- SSDEEP 1536:KBx8RW3rI8oLFpuSSL+lNuSbg90/csUoT+pYrH2GAL21AJtofUw0pk4qhSztpAda:E/xxD1B
- TLSH
  T11383D9DA6AB3107A8C7360BA63FF4912A3A57043C505FC15FE8C99944FC86BC85B678D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26 behavioral27
- Target
  2.0.4/vk_swiftshader.dll
- Size 4.5MB
- SHA256 cc947f08b87f4636213211b22328c32d1986d49abc96a619799091fa6a15c851
- MD5 0d3deb7dc62ea45c6624aab2b1ed8071
- SHA1 0e4a7276784e3d8e6d6440669a65bd88f840b078
- SHA512 38b674e0a0fefe1fa61ae144e6707b0eb7cfb73a8d01315f2b984cd1ebeb017cddeb89e39daa0f5806cc295a540e826a97422a677c361ebab3f8e4767228e5e6
- SSDEEP 49152:53YxjaP0AETYj7g/yaI75j/7wiSmQEZLT/lbMnP3cuJUiId+R9iETUjdCB2KmGsl:UAbIASP1aRldQ
- TLSH
  T1BE264A03F6558199F02DC67D8B4BA622E631BC811B72B9EF12A03E051E77FE06B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  2.0.4/vulkan-1.dll
- Size 707KB
- SHA256 26460b9250e904a9db6e5e0893e746a84ffae21c02e083e3f33a913d7cc79111
- MD5 3cffcffbf394159458566fb79b9abd3f
- SHA1 7e0f09e9ea67e9e587305e2f740c8620dad12595
- SHA512 93a73aef9237d52119f9886ca6eff7975cdd6931d12087ea4c0397807b19c6195e24045d80b606bfc45f754c58ab5b1f789d95e91250828629724b9446501c55
- SSDEEP 12288:Dwc+2rLfirhAu07HvM5BSNraGMiuvo52Ap:D82r79KBSwBiuv
- TLSH
  T1DFF47D3A7E94015DF5B6C038DA074621EA71BC620B64B5DF13A0131E6FAFBE42B7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  2.0.4/zEro64.exe
- Size 129.9MB
- SHA256 e26b71e7f704ef42dd9aebc6d19b9c5c9eb6c40b9a2df5656589b92b86b44bf2
- MD5 f1b530f65bb8de950b2ac24d0e6cbf99
- SHA1 69762914345737a8186724ab39b9de605dad2074
- SHA512 dabb2acbc8db315ff3a5e675a7f91c6361907c9f3a00c3c99b36b59340ecd401250f04dc9c1f3ba3ca7053c52c15e2bdb144498c4f26bc451f3932e57079a782
- SSDEEP 1572864:omYWQRWtJ65M7a2iu4Rywh9hJyO9N+oJOTU8f/kmgZ2sI:f4M7a2H4Ryu+dNgI
- TLSH
  T184587C03E29610D9F09DD1B59B468636DEB2BC454739A2DF2690271A2F7BFE0273DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion spyware trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

defense_evasionspywaretrojan

© 2018-2026

Terms | Privacy