General
- Target zenon browser.exe
- Size 2.4MB
- Sample260812-l52tkathqc
- SHA256 e58c9c9ddad4a05f916f10442bc6decb5b00f5a6792dde21d9d965fb45c72ca1
- MD5 dcba633d1ae0bf79d4a1039745e57b2f
- SHA1 d39ab415aedfb62a583c53eb6dbdcc4b9501628b
- SHA512 84a7e02185d49f31a646124a097dc79ca223a07f8cad633a138a434b373996ec63c6747756ae9ae4d5499fe64deb7ea52be5c0ffd6e802adbc2467f94dccf1c1
- SSDEEP 49152:Q/gVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4OK9:agVUuHjkDGjYQDGuRxzew
- TLSH T190C5016833F9C60CF1BF0BF4A4B149664B71FD069C96D76C18A5B9ED04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
zenon browser.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Professional
C2
-
jaydendestoyer101-44157.portmap.host:44157
Mutex
-
DeAoj73RL9almQmXgH727ca
Attributes
-
assist
true
-
box
false
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
true
-
delay
0
-
hide_file
true
-
open_website
false
-
password
t.me/junk_code
-
process_critical
false
-
raw
https://pastebin.com/raw/k5PcpeFy
-
reconnect
3
-
startup
true
-
tag
Infected
-
uac
true
-
vm
false
-
website
https://t.me/example
Targets
-
- Target zenon browser.exe
- Size 2.4MB
- SHA256 e58c9c9ddad4a05f916f10442bc6decb5b00f5a6792dde21d9d965fb45c72ca1
- MD5 dcba633d1ae0bf79d4a1039745e57b2f
- SHA1 d39ab415aedfb62a583c53eb6dbdcc4b9501628b
- SHA512 84a7e02185d49f31a646124a097dc79ca223a07f8cad633a138a434b373996ec63c6747756ae9ae4d5499fe64deb7ea52be5c0ffd6e802adbc2467f94dccf1c1
- SSDEEP 49152:Q/gVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4OK9:agVUuHjkDGjYQDGuRxzew
- TLSH T190C5016833F9C60CF1BF0BF4A4B149664B71FD069C96D76C18A5B9ED04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10