Overview
overview
7Static
static
3EZPing - C...ia.zip
windows10-2004-x64
3EZPing - C...ia.zip
windows11-ltsc_2024-x64
3ezping/Any...G).exe
windows10-2004-x64
7ezping/Any...G).exe
windows11-ltsc_2024-x64
3ezping/EzP...Ex.dll
windows10-2004-x64
3ezping/EzP...Ex.dll
windows11-ltsc_2024-x64
3ezping/EzP...ib.dll
windows10-2004-x64
3ezping/EzP...ib.dll
windows11-ltsc_2024-x64
3ezping/EzP...re.dll
windows10-2004-x64
3ezping/EzP...re.dll
windows11-ltsc_2024-x64
3ezping/EzP...UI.exe
windows10-2004-x64
3ezping/EzP...UI.exe
windows11-ltsc_2024-x64
3ezping/EzP...ce.rtf
windows10-2004-x64
3ezping/EzP...ce.rtf
windows11-ltsc_2024-x64
3ezping/EzP...ro.dll
windows10-2004-x64
3ezping/EzP...ro.dll
windows11-ltsc_2024-x64
3ezping/EzP...rs.dll
windows10-2004-x64
3ezping/EzP...rs.dll
windows11-ltsc_2024-x64
3ezping/EzP...ps.dll
windows10-2004-x64
3ezping/EzP...ps.dll
windows11-ltsc_2024-x64
3ezping/EzP...pf.dll
windows10-2004-x64
3ezping/EzP...pf.dll
windows11-ltsc_2024-x64
3ezping/EzP...on.dll
windows10-2004-x64
3ezping/EzP...on.dll
windows11-ltsc_2024-x64
3ezping/EzP...nt.dll
windows10-2004-x64
3ezping/EzP...nt.dll
windows11-ltsc_2024-x64
3ezping/EzP...ns.dll
windows10-2004-x64
3ezping/EzP...ns.dll
windows11-ltsc_2024-x64
3ezping/EzP...rs.dll
windows10-2004-x64
3ezping/EzP...rs.dll
windows11-ltsc_2024-x64
3ezping/EzP...on.dll
windows10-2004-x64
3ezping/EzP...on.dll
windows11-ltsc_2024-x64
3General
- Target EZPing - Copia - Copia.zip
- Size 12.6MB
- Sample260804-maz7xsxerg
- SHA256 52d71c7bd7a672222fbfdac2a717c71f6343d23113e5b363a5a6c6716a1b29a1
- MD5 5d9b2a13c038a4b33e506b93df9238d6
- SHA1 6dfd0228e5bd31bd5ba05b6b5c688bc6d2be1460
- SHA512 53d46c781da9df94d4b16e28e048a4f1cae5a4a6a0d3f0d3988daa606f02299e2c626b5692890afebb4caea492212d26e3c2f8a9cbab351b1f082bef702fa246
- SSDEEP 196608:AcBtngdVny4oQ9IXl/Uos0JOxG4HFqa29m8aTc/WQ5oKqZn46dKYlBiqgRgD1YiV:/ngdPalcV0JE9HEcEmKqZn1jBoQ1Yna
- TLSH T165D63387EB2B4D41D0A1F5B3FE65D6474C7405EC0634DA62F12108F96AAB7BF0A4C1AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
EZPing - Copia - Copia.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
EZPing - Copia - Copia.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
ezping/AnyDesk (EZPING).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ezping/AnyDesk (EZPING).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
ezping/EzPingFiles/ControlzEx.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ezping/EzPingFiles/ControlzEx.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
ezping/EzPingFiles/Dia2Lib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ezping/EzPingFiles/Dia2Lib.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
ezping/EzPingFiles/EzPing.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ezping/EzPingFiles/EzPing.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
ezping/EzPingFiles/EzPing.UI.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ezping/EzPingFiles/EzPing.UI.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
ezping/EzPingFiles/Licence.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ezping/EzPingFiles/Licence.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
ezping/EzPingFiles/MahApps.Metro.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
ezping/EzPingFiles/MahApps.Metro.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
ezping/EzPingFiles/MaterialDesignColors.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
ezping/EzPingFiles/MaterialDesignColors.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
ezping/EzPingFiles/MaterialDesignThemes.MahApps.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ezping/EzPingFiles/MaterialDesignThemes.MahApps.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
ezping/EzPingFiles/MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
ezping/EzPingFiles/MaterialDesignThemes.Wpf.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
ezping/EzPingFiles/Microsoft.Diagnostics.FastSerialization.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
ezping/EzPingFiles/Microsoft.Diagnostics.FastSerialization.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
ezping/EzPingFiles/Microsoft.Diagnostics.Tracing.TraceEvent.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
ezping/EzPingFiles/Microsoft.Diagnostics.Tracing.TraceEvent.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
ezping/EzPingFiles/Microsoft.Expression.Interactions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
ezping/EzPingFiles/Microsoft.Expression.Interactions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
ezping/EzPingFiles/Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
ezping/EzPingFiles/Microsoft.Xaml.Behaviors.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
ezping/EzPingFiles/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
ezping/EzPingFiles/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target EZPing - Copia - Copia.zip
- Size 12.6MB
- SHA256 52d71c7bd7a672222fbfdac2a717c71f6343d23113e5b363a5a6c6716a1b29a1
- MD5 5d9b2a13c038a4b33e506b93df9238d6
- SHA1 6dfd0228e5bd31bd5ba05b6b5c688bc6d2be1460
- SHA512 53d46c781da9df94d4b16e28e048a4f1cae5a4a6a0d3f0d3988daa606f02299e2c626b5692890afebb4caea492212d26e3c2f8a9cbab351b1f082bef702fa246
- SSDEEP 196608:AcBtngdVny4oQ9IXl/Uos0JOxG4HFqa29m8aTc/WQ5oKqZn46dKYlBiqgRgD1YiV:/ngdPalcV0JE9HEcEmKqZn1jBoQ1Yna
- TLSH T165D63387EB2B4D41D0A1F5B3FE65D6474C7405EC0634DA62F12108F96AAB7BF0A4C1AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/AnyDesk (EZPING).exe
- Size 6.3MB
- SHA256 d630e0751df816caa05fd67f06acce68449a2df82608830ac338e7ec81cf05a2
- MD5 2bd6857555922c383735781ac65f6815
- SHA1 4b6716196bec722f262fd2e9388ed9ecd54b410d
- SHA512 d70068375443bd115af63d4509e42de1cb517ee847e5c8f3f702d850e40ab954b4a54b66a7404c64ec63cb67eb5452922b9f2e96f65bd5fbb2241845be82ac69
- SSDEEP 196608:HhNt0udbn3Zdo82vHflFx2s91uWZ84dd3dmp:HZ0udjZUFxz5Z8kop
- TLSH T1E96633CFF30A6E86D4678573FD03843D4E925BA91271D2335192119B67EE06F2B0B2A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target ezping/EzPingFiles/ControlzEx.dll
- Size 244KB
- SHA256 f15d89d9720eedb94c09b1db32ca6a514e9eff2906da91396ffd7f877714911e
- MD5 37dbeb3e804d61cefed67d1a60dde873
- SHA1 31fb981cc429cd24066363160e49c85fd74df8db
- SHA512 7279e2354a9e1a583098bc9f6ff9ec05bb2b526ca151265d4c8c2bb42edd15b3d157425bc76e01b9f0e03cb1c87cb46bc94f9a1f47dc2a79daee784d6122f3fa
- SSDEEP 6144:M6bRKhjsomR8PpY82VG7gP2rxp+7vVNviPF1WANK+5/:M6Yye9
- TLSH T1BB349F2533E88A2AC5FF077AA4F041148771FE56E7A7DF4E19C466BA4C93702AA403D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/Dia2Lib.dll
- Size 57KB
- SHA256 6c4cac68010fe032218efe5e9fcf46eef9f77bfaa5f3bd33f03c5ff77d5a8fac
- MD5 be6474b726207994decdc22e84936a3c
- SHA1 ea1d16f16de16b29a576a1b5cc4baa31bc5db9bb
- SHA512 d204240213a0b509101ae3c9b691e9f6a141946cf3284244f56314183c84d24c1cdaa28661444fb8e1dc018e24f8aae4505c35f9994e368032a9913c9de8ff59
- SSDEEP 768:MQMT4Q3O9ymyKJcy3Xs3y4rV50sds8SzUwHhvoVi+CLr0:dQCye14oGs8SNhgVVAA
- TLSH T154431827761CF40DC5A26ABE91CDDEA22770D7417B03CF02499CB36A9F437496B62239
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/EzPing.Core.dll
- Size 37KB
- SHA256 eafe28022485a6ba87922c88d34cce2f07edb4a4437787aaaac3b5fc1cba6b12
- MD5 2f94f2263d597a6bd778dd481c5cacc2
- SHA1 1149a8c2dce3f7929bf68be0fdbdc704237432b9
- SHA512 dda90378f55794446d87ce7cf32121e50dab876e2f732aff598b7fb381814aff88bdeb9eae78bc31a06b92f0f6898b400ddee49e731b36701063e4ca81e86157
- SSDEEP 768:c5Hae8DOd0TZIVEvj2QG4XkHRGEwD+3JbvlVnV+/4ulR2:c5T8DOd0TiE4HRGE53Jby
- TLSH T17B032B0063ECC727D79FAD7898758342C672FA4BB912FB8B498CF5D8299238159087D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/EzPing.UI.exe
- Size 1.1MB
- SHA256 615cd3b6aad84696e5e051d53f523ab36a3552dc4821d62b079c53684d8540c8
- MD5 e28520a104618842e640e9aff6c8803d
- SHA1 90c0b1ebb0f16550b1fd9a878f0aac79aba4b366
- SHA512 41d118fa2053b21618b2536c80a7e73396944e97a2591d67146fba3582076d981c43d7fc65f5b6693680938ebdce8ccc8fe073e6b0fbd1618d97dd35443c9355
- SSDEEP 24576:03YALJ7ZWzlrLuHxMrt01dsvLW4XRbgZltNH3o25RPBcoj+mm7Jo:gl78zlrSH+OEW4Xtgjv37Jcoj+mm7Jo
- TLSH T16635125503AC4A61CBEF16BED122824293B1C95BE762F79B48C570E83DDE3355A103BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/Licence.rtf
- Size 13KB
- SHA256 bd217f0b16b9a98bd3582261eb2b2b8628d1ae74d6949a496a37c89caa039315
- MD5 ded7630c6e7a7d643ea2af6ca348b5a1
- SHA1 ad8b28a55ddb0783b2083eedb1b5bbb13e65d4f5
- SHA512 7555af974333dfada3d90abf37f9bf610e31d1abc4a45898fa8b274c42122901048a9ec49fd03c7b7eb86b42743c05f1bc7bbbce2105df22bb7a5332cbb1d154
- SSDEEP 384:q5dfUUi0cMUFavWKZ/3X+uaKd29u0nQwJXh2:qPGhcvW0fNsA
- TLSH T1C352B657B748137306DA1291774F66D0F32E84B86B72A051387CE1282396DBDB3B72DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/MahApps.Metro.dll
- Size 3.4MB
- SHA256 7d73c79b4bcf30c079da8fc9e8c520e79247241a74956b13b6c36dc2290ecc88
- MD5 4c6ee8f47105a84521fc4b30165c9454
- SHA1 cd378771c395e0de6c3087f9a37a9c8a51387c76
- SHA512 c99f99427ae5058ede11bb1c8a176c84ae7d04ef55e46aa58fe0734e6f4aefcc1ab026c97df65789d020601de9d9fa530cee6e26b57e478dcd18a21b58bc00bb
- SSDEEP 24576:fHk2ZORG3QU7qDL2PtBLhM7RU7R2/8QcVRt6y:fHk7G3pdmRU7R2/8QcV1
- TLSH T168F57424C219C537EFA35E751F5098E41E2018E98342FE1A2BFD3B3588C575E26BB927
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/MaterialDesignColors.dll
- Size 295KB
- SHA256 9fa38197eed5ca1fac2d056fcfd2767a74648bc836725d255477b251567badb6
- MD5 0b3fa388485ac78ef83d1221ba6693b7
- SHA1 19c8555dbe8566b91a0344658422bac8f5933e6b
- SHA512 4969bd704128cbc091bb40f8575690c7479fe2b54048009c6eeb91c1f1a0100d58195d62243712f6fc1d4dcbb4d227596e09e81c45de0b1c7d656ccba65a2d5e
- SSDEEP 1536:EBuHdH8tB0AyG1iW0BcGgHYiBN03U7fKoVxb8S6E45tps0B6IxcE+G09qSoowoO5:JVrAtVXt7fKoVxb4l
- TLSH T12154755C1250D0FED81357764834358A62677A2AAB988F8BEF6F72FD8C1600B4B335E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/MaterialDesignThemes.MahApps.dll
- Size 108KB
- SHA256 a39891261ee3d9635c5a6aea7f7976557f1954f745ecfe7a0cd41d8e7e339a49
- MD5 f7a3e92bd33086309cd964d6bf750682
- SHA1 14e358b9f26e5b008be1de5ae45fc040848a700d
- SHA512 d1bfad365eeb5504442cf4ae48b8a104c41f02c7239f0bfada69932453d0ce8d8aa1f4b7afc1ec218641e322c8ddaa674d1d02119a5fa80ce8d921edaccf3137
- SSDEEP 3072:tqEwPEuc26hjmDRHqkXslLTQPTC0X/ACNS85L5c5P5JFiZr/wbNkLkckPkJ4H4wm:m7DRHqkht
- TLSH T156B3F00033E60306F27A4FB41AF3D964057AB5A7CE72C76C61C9358A1AB5A95C636F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/MaterialDesignThemes.Wpf.dll
- Size 7.8MB
- SHA256 9b24e7377cf03ed93cd76c4e11330e2c67cc42e2875a97fa50b9a036a005f75d
- MD5 5cea9e8224b3b065bd872e6a319c4afc
- SHA1 ff39e380d646042bb2dcb3f00b753532a5a327de
- SHA512 7ac8e8f4c5de5b6b376315960235fab7199da8118cadf5d49adb03ce22c891311a0e614cb037c2282161ae33257fb460e0bc51deb4468f5d2f2a028274fa832f
- SSDEEP 98304:aXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCR2fShTy:knJ45/9iD54+V11bFv4z
- TLSH T1C486EB2CC905A767E2B7C164819E0A1BF1A2852AF53D9F0E30CB1B5932479837E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/Microsoft.Diagnostics.FastSerialization.dll
- Size 51KB
- SHA256 9b2b2c19ae32072344072a40c6b16842077a19bac04294b2b5f32281913fe95f
- MD5 bd15bd3c87e0a3ba1f161af2e4afacc3
- SHA1 633dc309175b117bb314ca32a99ad91192b88c37
- SHA512 0c53d140e0226b5bb85d481a6f9d005ee429af1d7df8a216c7bcc464cc4b08ca4102d84f51c829f0e90894ef37d75989422dac38f61c632acfaeabb13c740938
- SSDEEP 768:UaGaPH2h2VgElaeKE/D/bjHU1rAe0Ly0JQdAiC1MklkraWzmSOxVzVDFHpze686a:fPuEjKE/DTjHI1skraWapJpzZ5vc
- TLSH T149333955BAEC8713CAEF6AFAF8B485051774EA722932D7CE0854F0B81C537D48A2171B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/Microsoft.Diagnostics.Tracing.TraceEvent.dll
- Size 2.9MB
- SHA256 011bed2efa854fe5ba2a36190de5a65f3bd6008603508a1b950f078ed96bbc71
- MD5 6c530ce9c11c3ec95a2ea25c53fe844a
- SHA1 9d6b194bc1bfab2f0176f65110b13f4c39d4fab5
- SHA512 5692235c4a5acfcb99c2923f3ff67929a88cde1df275a145e377fbdbcb1f74e6aaa5cf0866b500c5a59554ced2723d9a33e8097c918fcda82140c752c8f067b3
- SSDEEP 24576:eq4mZp30/hUhpfW8Xt+beEyb70fSU+asFx9yPKbrftpUW:Fvo2pW8uvSU+as/9y+
- TLSH T1A4E52B41EBB8AD2FD5EF8B3BD93D4039D6B5F9E4B3A5D24D1840A2741C123948A16B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/Microsoft.Expression.Interactions.dll
- Size 89KB
- SHA256 f3b14defbd05493b8573016b08b86e5b5d53b486b0457fd75f67bf8bff04be38
- MD5 6a3b9e46c41e42e7b8e1479468d892af
- SHA1 e31c05ae685e51d07808b1dd24ceced9d299ed81
- SHA512 d6416204875ce732edac51e36f267c9cca52f60ba79cd981b388988e435bd1cce87f972a9e90be4fd9a7fd25cb316293f938f45fb645f25a4f62b980a37236b7
- SSDEEP 1536:Srf5GttgxHXEuRmG5rtkGY4CEmWAxXSSYhhS98ca2Wvsd65FJDlGWwkEy:a5GttWHXEUx5r65LxXshk8JDIWP
- TLSH T197932A99A3E88E28C7FF177970B051144BB0EE477922D38D1EC5A2AE0DE374155826FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/Microsoft.Xaml.Behaviors.dll
- Size 141KB
- SHA256 ff75938fedee596706171916db763ac100bc7164a7346dd739ad61660e068b5a
- MD5 6b93b0f937d04d39172f9cd61fe58fd5
- SHA1 54fb26f8b4f11d01573fd1c6a1b532af2b37d687
- SHA512 d3b7bbb09842984147b8dc849ef7467c3927cd8730ccfcc310d6d46bf3070e826d7a1cffc43a2ccc33d5d8521ea07d2c19d766b127fafc71edcf288db187df1d
- SSDEEP 1536:CClZTaFPgnGNXRhJbyC35MilASMJmF0bapI2hJWq1dwpUgcacykfwtQsxspzSUMj:CCPmFPD950+dzR1decbMn5TX55r4j2
- TLSH T168E3396423FC4A2AD7FF1638E0B851208235EB97B562EB4C5EC591ED0563781B7123B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ezping/EzPingFiles/Newtonsoft.Json.dll
- Size 685KB
- SHA256 b624949df8b0e3a6153fdfb730a7c6f4990b6592ee0d922e1788433d276610f3
- MD5 081d9558bbb7adce142da153b2d5577a
- SHA1 7d0ad03fbda1c24f883116b940717e596073ae96
- SHA512 2fdf035661f349206f58ea1feed8805b7f9517a21f9c113e7301c69de160f184c774350a12a710046e3ff6baa37345d319b6f47fd24fbba4e042d54014bee511
- SSDEEP 12288:U9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3Q5:U8m657w6ZBLmkitKqBCjC0PDgM5A5
- TLSH T1B8E44A0633E88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10