86fbdddec45311e3ef222db0f707b0734098f69131afd8f5448abfebc4b07689

Resubmissions

10/08/2026, 00:14

10/08/2026, 00:02

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 00:02

Target
Zentra.exe
Size 168.6MB
Sample260810-abl1gaxfre
SHA256 86fbdddec45311e3ef222db0f707b0734098f69131afd8f5448abfebc4b07689
MD5 e8d77ac091a701b45b6586a67c2d3fed
SHA1 0c931389cde4ac4d16b6a3ff76c3ade5fab11de0
SHA512 bce982c8f0d545fee9f424da1c5468f390d9eff13c64b0d516e90b7b10fb80bdd3b5eca411a980f7adb64cc13d537a8f769a6ce490f521ffdfd0972752834256
SSDEEP 1572864:KOhiqBPiJU33xaD1gWcdcMPEDCNCgDX0Bf+NNvTPQYhl49RIuKj53fHcTLNKJF96:kgmeNxNNZxqV
TLSH
T19B887B13F29651D8F09DD1B18B578236EA72B8460738A6DF2754172A2F77FE02B39B10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2396 wrote to memory of 4412	2396	Zentra.exe	84
PID 2396 wrote to memory of 3872	2396	Zentra.exe	85

C:\Users\Admin\AppData\Local\Temp\Zentra.exe
"C:\Users\Admin\AppData\Local\Temp\Zentra.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Users\Admin\AppData\Local\Temp\Zentra.exe
  "C:\Users\Admin\AppData\Local\Temp\Zentra.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\zentra" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1684 --field-trial-handle=1692,i,8152056295673079361,351348938434396125,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
  2⤵
  PID:4412
- C:\Users\Admin\AppData\Local\Temp\Zentra.exe
  "C:\Users\Admin\AppData\Local\Temp\Zentra.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\zentra" --mojo-platform-channel-handle=1768 --field-trial-handle=1692,i,8152056295673079361,351348938434396125,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
  2⤵
  PID:3872