General
- Target zen.installer.exe
- Size 91.7MB
- Sample260809-a48d6sxejh
- SHA256 21392b4646e913a5876ed3d331f98f7f5ca7e77b6347c48d97088d930954ef3a
- MD5 53ff74a8e8a9c262d95872ed67c27370
- SHA1 894db706f760de7ab8f7e012b4c825ec28369bd5
- SHA512 2de3a867e05ab5a57b76cfd827f72fa651873e123265bd8c593e85c1a274f61dd70eae0203d616ee1b4971ee3ae880651845209b1368858f54b12da3e47d5692
- SSDEEP 1572864:3DAHwu/vn9rKwNoqO8ycQ8YI54GQMNdVzsgPJ6Fn0UFbzWrpggi3919GLyzd:Uh8Ie8ycQ8P4GQuzzsgRon0UXg09n
- TLSH T10C28331B4A6D360CF8438D75D35283C47396AD237B4E4A35862F42F707B19948CAFB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
zen.installer.exe
Resource
win10v2004-20260513-en
21 signatures
60 seconds
Behavioral task
behavioral2
Sample
zen.installer.exe
Resource
win11ltsc2024-20260709-en
19 signatures
60 seconds
Malware Config
Targets
-
- Target zen.installer.exe
- Size 91.7MB
- SHA256 21392b4646e913a5876ed3d331f98f7f5ca7e77b6347c48d97088d930954ef3a
- MD5 53ff74a8e8a9c262d95872ed67c27370
- SHA1 894db706f760de7ab8f7e012b4c825ec28369bd5
- SHA512 2de3a867e05ab5a57b76cfd827f72fa651873e123265bd8c593e85c1a274f61dd70eae0203d616ee1b4971ee3ae880651845209b1368858f54b12da3e47d5692
- SSDEEP 1572864:3DAHwu/vn9rKwNoqO8ycQ8YI54GQMNdVzsgPJ6Fn0UFbzWrpggi3919GLyzd:Uh8Ie8ycQ8P4GQuzzsgRon0UXg09n
- TLSH T10C28331B4A6D360CF8438D75D35283C47396AD237B4E4A35862F42F707B19948CAFB9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.