General
- Target zenith_main.exe
- Size 8.5MB
- Sample260729-spgl1sam5y
- SHA256 21edafaf88169a33bdd6ccacdac846b0ddc801569a06b73e7b9bfbd53a5c336e
- MD5 c2fd199361f5350f8cefe328835269e1
- SHA1 2d9ca1ccd6d4409abaea5161165e925a3dee30dc
- SHA512 bc495f04a5106142d2a0a3c5493477410dd71b8ade4c49eba600149a778b5be1c8cba8746766a06c2465175f7fb5e22bf63949273055c7bfe595c45438d76bff
- SSDEEP 196608:3emHLI+ELk3ykVX0OByPF0bOwXg2yU+KYQlAqc:OmHLwk3yehyPFlf24KYoxc
- TLSH T1A796331D5EF248F9C807A4B9912348E3E7281FD6D310A1C66E88D2BB6E77DD97931807
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zenith_main.exe
Resource
win10v2004-20260513-en
8 signatures
600 seconds
Behavioral task
behavioral2
Sample
zenith_main.exe
Resource
win11ltsc2024-20260709-en
15 signatures
600 seconds
Malware Config
Targets
-
- Target zenith_main.exe
- Size 8.5MB
- SHA256 21edafaf88169a33bdd6ccacdac846b0ddc801569a06b73e7b9bfbd53a5c336e
- MD5 c2fd199361f5350f8cefe328835269e1
- SHA1 2d9ca1ccd6d4409abaea5161165e925a3dee30dc
- SHA512 bc495f04a5106142d2a0a3c5493477410dd71b8ade4c49eba600149a778b5be1c8cba8746766a06c2465175f7fb5e22bf63949273055c7bfe595c45438d76bff
- SSDEEP 196608:3emHLI+ELk3ykVX0OByPF0bOwXg2yU+KYQlAqc:OmHLwk3yehyPFlf24KYoxc
- TLSH T1A796331D5EF248F9C807A4B9912348E3E7281FD6D310A1C66E88D2BB6E77DD97931807
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.