Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 12:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zipclip.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
zipclip.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target zipclip.exe
- Size 42.4MB
- Sample260808-pmjf2sde49
- SHA256 313ccb0fa425c13698b711d1b5a412921c56067c2bab5a675dfba063ac4644f9
- MD5 f3a34834c1c2431efe08590ee3f85dc2
- SHA1 96af6c0f3a252bdf8884837b57367d40dda5187e
- SHA512 9f7650e647b48be91d41f51028faaf9efeee7de218f3bb3f114ecbd57e48f1a11fb7c8128f5c17477406d29cfbfe6ced8416a1e425ca999b16a3733ae7f366bf
- SSDEEP 393216:HvV0gRp+7B3Zdp1uPGiSPWw1J/mn8tvO50jkLuETNAAAAIpIpAg1:HN0gq7Vfp1uVS+w1YEvNpy
- TLSH T1E2A7AE03F91619D6C72C84B9C49A06163774BC90272EAFD72B50BB34AEE72C45E7B394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 5132 zipclip.exe 5132 zipclip.exe 5132 zipclip.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 5132 zipclip.exe 5132 zipclip.exe 5132 zipclip.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5132 zipclip.exe