6c5ba9024084cfdb1f98783708d92710c52e20c41ba329c645fa70d21fcbf215

General

Target
loader.zip
Size 96.2MB
Sample260816-x17d2awsbs
SHA256 6c5ba9024084cfdb1f98783708d92710c52e20c41ba329c645fa70d21fcbf215
MD5 3d4dc498f5c0284a74db3a0aea9eca03
SHA1 4d6e770dfded840238946c00fede2d168929cd5b
SHA512 2d2abb1096318162125833165d1ff1bda141f13a6d4d71b3b70f24504e6f1ecf33773028e706ef626579ea68eb8e4766f1f3663d1fe492e278d6ae768d99e2fd
SSDEEP 3145728:5dXdR+Pk2fAhLdPXALLwBowhAdp3K5jT62E2oVL:7/+M2fA3PQco3p65TV94L
TLSH
T17B2823E440A947909F01BA39CB96341E3D6F4EE8E784F68313C55C24DEAD2B75BCA1C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  Zeropay/reverse/Imgui/imgui_widgets.cpp
- Size 300KB
- SHA256 deaca57f37ee6cdb8a50f7f1c5cd96068e61586958e8754ee60dc8c8d83dd214
- MD5 cd5b4064d653e59db2e5b965cd072621
- SHA1 01ef49f00d0d865ba3103fe848d5a97dec44efa8
- SHA512 082665890529b9681b9b82ce3a832ce5aa086ed78c793678d1bb649efbf7c758d1b83589cbc65813e5bf8ad0a40c0dbc22ff595fb7a1d2976ec67e18eec14892
- SSDEEP 6144:A1YSk3XDtBBkgqkGvki6MiZMhS3WbKmhOhXn:A1YSk3ztBBkgqk8qMiZMhS3iKmhOhXn
- TLSH
  T1FF64C4811D2326268933F0284FC76259EB2959773B94C9A07B1D635C7F84436C2BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1
- Target
  Zeropay/reverse/x64/Release/vcpkg.applocal.log
- Size 5B
- SHA256 f01a374e9c81e3db89b3a42940c4d6a5447684986a1296e42bf13f196eed6295
- MD5 3bab25a3e651a9e4a00473d2257b99f9
- SHA1 1419458f2696be8daeade77ddad380cd0c871fdb
- SHA512 ae8dc1129b7a81ba70c9512a94a3e9ccd8c159f1817e309198c2babaf5bcb3f7e97f43b54ea4937cbea468bb5a62328fc0c01982aa1b883d8fd6d2e2c58090ff
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral2
- Target
  Zeropay/reverse/xor.hpp
- Size 2KB
- SHA256 3afb5d807f3f05478c03ed166cbc937b004e1008351ea9e17fcbc919aa43ba42
- MD5 5355013964b0f3df342578dc78129611
- SHA1 ab064a63a95fb7f9f8590dac676c7bc86e0d5569
- SHA512 c9206421a796c5f6b84d7329afdb45d805165599d30a8b7e7bc5264233a922449b0a0bda60b628bb5099269e1c593abb7dbb8ff36ae65a4797d085b072cc484e
- TLSH
  T1BA5146B27A54E213BBD425A158E1940142FD2433B934EEF2D6BD8230A152E2FA2F3775
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  Zeropay/reverse/xstring.h
- Size 233KB
- SHA256 839b422f590bbaa9bce54a6855056e9cca5428a7d7b7f6cf4292dd8a7a8c08c6
- MD5 f0b67571aed2c7ca40234c7a8d87a329
- SHA1 9573279da8c80e2b2328ba7eeaf8899e11d3c1fc
- SHA512 fa2e8c2005f41f285739ddfc6050707bec3f71fab8c7921a9b09b2241a49191bd7d79869a463a292bc496c6462a188c9653ec8be4d06d83f0d71b7e869cdac2f
- SSDEEP 6144:UYUKOcznDID7wmJUe4TNO8PK/l4TNP8fS6duqZcXL6d4TIJFTNj9PjlWOpC7RqOc:pnDIDxJUe4TNO8PK/l4TNP8fS6duqZcK
- TLSH
  T1293483A321D6B44129767396F7831036E7095113B6B1C5E8F9EC86387FB2091D272FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Zeropay/x64/Release/BeDaisy.sys
- Size 18KB
- SHA256 35b0d79631b6c0e13569b35fea3371e540e1e24a1ad240aa4095bc003312463b
- MD5 4c0c465499d6ee54352570d2807d12d8
- SHA1 332a6b3bf722e97780d09328d420fc8815f8e514
- SHA512 53124eadac016c0ad5c2937d09a8a37a4fabda32b56bb3fb90defdab9fa2ba149841056f992e0fb7154308aa71b4f5352a5dcbb5d7ddecf0b5aa036f1899c5ce
- SSDEEP 384:e2regI48Iq1qhvYoP6MUMv5g5M/b0475a:eaUi/UMvTJa
- TLSH
  T15C822CC3A39C58E5E31DC1BB46661A27D1B2BC25272377DF0251C13A2757AE8753AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Zeropay/x64/Release/Loader.exe
- Size 1.1MB
- SHA256 922e7cfc333451c7e46d0845b784788afaca76c9ac94ef8fc9a6f454a94b3aca
- MD5 714342249c3942fd228ea95dd17cdcb5
- SHA1 a6fcee980b195c632f3ca63b0288e79466f263b2
- SHA512 2df40f05171059cc5624b7fcb5bfddd14223abd49b4813860709dce8284f9084ffd3f502477dbc392890839224441a0f34e462b7859d06269266412720a74b4d
- SSDEEP 12288:3oq2BYjhWlRtAdgTrchc56ngZFvPvPh0YuuDt:Y1W6RtasH6nqvPX
- TLSH
  T152351756A69149A6C47A523454E2E23AFB7A3C74063283072ADE7D373FF2FE1AC55301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  Zeropay/x64/Release/kdmapper_Release.exe
- Size 150KB
- SHA256 2587788926cf9bc8a5b59b117a36db91fc7d2fba4f8d23ea1d893e23123287fa
- MD5 609b7bb49e4d6437f99f12062a423d51
- SHA1 debab79a9b907df4d8904b309369ef2ffbb6ea54
- SHA512 c90a4ce8a0773bc731cd7951f44d5706ec14f07842ffe30a28e392783a3ca63d00bb90c80bb608d3c03e4376c238a17607dbd591b4a4911854af0f6bc0fa2a53
- SSDEEP 3072:4QeuLZ8OB7/Uk7sMDcFS0Dzj+kwBmJTQSaMm5/6YwDi3:4gNpBDUk7ncFSQPfJWlj+4
- TLSH
  T12EE32A5787A9106DE1B7D6B9CAB24911EB727C550B74E2CF135048BA0F327D0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7