Analysis
- max time kernel
149s - max time network
177s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 20:18
Static task
static1
Behavioral task
behavioral1
Sample
TLOZ-TOTK-(US)-NSwTcH-NSP-Update143p-Ziperto.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
TLOZ-TOTK-(US)-NSwTcH-NSP-Update143p-Ziperto.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
The Legend of Zelda Tears of the Kingdom [0100F2C0115B6800][v720896][US][Update v1.4.3p].nsp
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
The Legend of Zelda Tears of the Kingdom [0100F2C0115B6800][v720896][US][Update v1.4.3p].nsp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Ziperto - A Digital Park for Gamers.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Ziperto - A Digital Park for Gamers.url
Resource
win11ltsc2024-20260709-en
General
- Target TLOZ-TOTK-(US)-NSwTcH-NSP-Update143p-Ziperto.rar
- Size 503.8MB
- Sample260804-y3c4msgd65
- SHA256 0d0c55823387003710296d8f43ba7be977530c1905af3c31961b58d0c3d4c9d3
- MD5 2229156c128ebb34ebc56779f74b381e
- SHA1 ee623f9f85a8db52feee398e506804bb5bc23931
- SHA512 a1d85cdf83faed60b40d1f71c952346df2c8d1d413843887cd98c34f86f3dacb92908e66e671401168b28bff6eb7e6c8a7e4bbe38707fcf0fa651ff5b5dbe5d6
- SSDEEP 12582912:OmT+n/VK+Se1y5ypAQ0+dmmlTJNRgOgzn35NuMM:OVn/VBAypHdZNR635NuMM
- TLSH T1364933CF76D35289222F20B877C94D428D871B7A0FEE93AF8E19BC87E0942671455DC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1740 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1740 7zFM.exe Token: 35 1740 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1740 7zFM.exe