General
- Target Zyx.BTD.EzModder.exe
- Size 5.7MB
- Sample260721-l61mwset8v
- SHA256 4f95eb140e150cbe05bdb5607085a5455279f35a625ae7d0a8e3be9b6d930838
- MD5 e94faba5b1d74dd977fecc9721986a53
- SHA1 e18737f8d877aa6d26ff17cfd19cd220c157ef68
- SHA512 87d551a064f6d1be77d0f019c98872b7a133d3ced73a0ba1880071a4c22a6e701bee09a389899ebac0ac74f52ea681881eab09b5c59f24ee92d27b1209d93943
- SSDEEP 98304:krt7sec0yJzADXw/vm6DugqfFzRdhrha4yu4eVUvFyx6cCMKaGTW2uWBPdKko5FW:gqec/JzADA/vm6D4trrha4RlVk46QKLl
- TLSH T1CD5602EDB21077DFC817C47B8EA82C64E651687B431B4213911B15EFAE0C997CFA46B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Zyx.BTD.EzModder.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Zyx.BTD.EzModder.exe
- Size 5.7MB
- SHA256 4f95eb140e150cbe05bdb5607085a5455279f35a625ae7d0a8e3be9b6d930838
- MD5 e94faba5b1d74dd977fecc9721986a53
- SHA1 e18737f8d877aa6d26ff17cfd19cd220c157ef68
- SHA512 87d551a064f6d1be77d0f019c98872b7a133d3ced73a0ba1880071a4c22a6e701bee09a389899ebac0ac74f52ea681881eab09b5c59f24ee92d27b1209d93943
- SSDEEP 98304:krt7sec0yJzADXw/vm6DugqfFzRdhrha4yu4eVUvFyx6cCMKaGTW2uWBPdKko5FW:gqec/JzADA/vm6D4trrha4RlVk46QKLl
- TLSH T1CD5602EDB21077DFC817C47B8EA82C64E651687B431B4213911B15EFAE0C997CFA46B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.