General
- Target ZeninHypervisor[FREE].exe
- Size 35.7MB
- Sample260818-rnt1aatelc
- SHA256 429b1d835589ca5a4caab03a9b55f8982e2d522b79d3e619e047047a54bf5ac0
- MD5 544ebbd3e9ea5b730f3f7ba70f3313ef
- SHA1 58cc2ef24ae787337ab5a12499aea1adaf29cbb1
- SHA512 e1b4516b0ec4eacc7b5dc82fd89e5a2e11ff34b2d18bb947753f14005a187e1262850982d2e7e7911dfc81bca3c572f6715d03efa2e3d6f875fa63dca052c063
- SSDEEP 786432:Cv3XodDHa23h9bSGWZLprE6SRgxc3uN3fPehBee6QQxftV:QYdTj3TbSGW/fUAc3uN3fcBzQBf
- TLSH T1CF8733EBA1D972D4B4C34F40E209B1C6BC8674BA59FA48551DC52D031760CBEAE8DEB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZeninHypervisor[FREE].exe
Resource
win10v2004-20260513-en
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
ZeninHypervisor[FREE].exe
Resource
win11ltsc2024-20260709-en
14 signatures
600 seconds
Malware Config
Targets
-
- Target ZeninHypervisor[FREE].exe
- Size 35.7MB
- SHA256 429b1d835589ca5a4caab03a9b55f8982e2d522b79d3e619e047047a54bf5ac0
- MD5 544ebbd3e9ea5b730f3f7ba70f3313ef
- SHA1 58cc2ef24ae787337ab5a12499aea1adaf29cbb1
- SHA512 e1b4516b0ec4eacc7b5dc82fd89e5a2e11ff34b2d18bb947753f14005a187e1262850982d2e7e7911dfc81bca3c572f6715d03efa2e3d6f875fa63dca052c063
- SSDEEP 786432:Cv3XodDHa23h9bSGWZLprE6SRgxc3uN3fPehBee6QQxftV:QYdTj3TbSGW/fUAc3uN3fcBzQBf
- TLSH T1CF8733EBA1D972D4B4C34F40E209B1C6BC8674BA59FA48551DC52D031760CBEAE8DEB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.