Overview
overview
3Static
static
3SoundCloud...rt.dll
windows10-2004-x64
1SoundCloud...rt.dll
windows11-ltsc_2024-x64
1SoundCloud...64.sys
windows10-2004-x64
3SoundCloud...n1.dll
windows10-2004-x64
1SoundCloud...n1.dll
windows11-ltsc_2024-x64
1SoundCloud...ws.exe
windows10-2004-x64
1SoundCloud...ws.exe
windows11-ltsc_2024-x64
1SoundCloud...T).exe
windows10-2004-x64
1SoundCloud...T).exe
windows11-ltsc_2024-x64
1SoundCloud...0).exe
windows10-2004-x64
1SoundCloud...0).exe
windows11-ltsc_2024-x64
1SoundCloud...1).exe
windows10-2004-x64
1SoundCloud...1).exe
windows11-ltsc_2024-x64
1SoundCloud...2).exe
windows10-2004-x64
1SoundCloud...2).exe
windows11-ltsc_2024-x64
1SoundCloud...3).exe
windows10-2004-x64
1SoundCloud...3).exe
windows11-ltsc_2024-x64
1SoundCloud...4).exe
windows10-2004-x64
1SoundCloud...4).exe
windows11-ltsc_2024-x64
1SoundCloud...2).exe
windows10-2004-x64
1SoundCloud...2).exe
windows11-ltsc_2024-x64
1SoundCloud...3).exe
windows10-2004-x64
1SoundCloud...3).exe
windows11-ltsc_2024-x64
1SoundCloud...4).exe
windows10-2004-x64
1SoundCloud...4).exe
windows11-ltsc_2024-x64
1SoundCloud...5).exe
windows10-2004-x64
1SoundCloud...5).exe
windows11-ltsc_2024-x64
1SoundCloud...6).exe
windows10-2004-x64
1SoundCloud...6).exe
windows11-ltsc_2024-x64
1SoundCloud...7).exe
windows10-2004-x64
1SoundCloud...7).exe
windows11-ltsc_2024-x64
1SoundCloud...8).exe
windows10-2004-x64
1Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/08/2026, 17:45
Static task
static1
Behavioral task
behavioral1
Sample
SoundCloudZapretFix/zapret/bin/WinDivert.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SoundCloudZapretFix/zapret/bin/WinDivert.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
SoundCloudZapretFix/zapret/bin/WinDivert64.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
SoundCloudZapretFix/zapret/bin/cygwin1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
SoundCloudZapretFix/zapret/bin/cygwin1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
SoundCloudZapretFix/zapret/bin/winws.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
SoundCloudZapretFix/zapret/bin/winws.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
SoundCloudZapretFix/zapret/general (ALT).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
SoundCloudZapretFix/zapret/general (ALT).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
SoundCloudZapretFix/zapret/general (ALT10).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
SoundCloudZapretFix/zapret/general (ALT10).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
SoundCloudZapretFix/zapret/general (ALT11).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
SoundCloudZapretFix/zapret/general (ALT11).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
SoundCloudZapretFix/zapret/general (ALT12).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
SoundCloudZapretFix/zapret/general (ALT12).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
SoundCloudZapretFix/zapret/general (ALT13).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
SoundCloudZapretFix/zapret/general (ALT13).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
SoundCloudZapretFix/zapret/general (ALT14).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
SoundCloudZapretFix/zapret/general (ALT14).exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral20
Sample
SoundCloudZapretFix/zapret/general (ALT2).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
SoundCloudZapretFix/zapret/general (ALT2).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
SoundCloudZapretFix/zapret/general (ALT3).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
SoundCloudZapretFix/zapret/general (ALT3).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
SoundCloudZapretFix/zapret/general (ALT4).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
SoundCloudZapretFix/zapret/general (ALT4).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
SoundCloudZapretFix/zapret/general (ALT5).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
SoundCloudZapretFix/zapret/general (ALT5).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
SoundCloudZapretFix/zapret/general (ALT6).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
SoundCloudZapretFix/zapret/general (ALT6).exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral30
Sample
SoundCloudZapretFix/zapret/general (ALT7).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
SoundCloudZapretFix/zapret/general (ALT7).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
SoundCloudZapretFix/zapret/general (ALT8).exe
Resource
win10v2004-20260513-en
General
- Target SoundCloudZapretFix/zapret/bin/WinDivert64.sys
- Size 91KB
- Sample260814-wb74layamd
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4072 cmd.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\SoundCloudZapretFix\zapret\bin\WinDivert64.sys1⤵
- Executes a command shell one-liner
PID:4072 -
C:\Users\Admin\AppData\Local\Temp\SoundCloudZapretFix\zapret\bin\WinDivert64.sysC:\Users\Admin\AppData\Local\Temp\SoundCloudZapretFix\zapret\bin\WinDivert64.sys2⤵PID:1680
-