51e3dabeba898bc9383b50cf1438e312bde667416aaf2865d372225d8aba4dca | Triage™

Login
Reports

Overview

overview

6

Static

static

3

zstream-windows.exe

windows10-2004-x64

6

zstream-windows.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
zstream-windows.exe
Size 23.7MB
Sample260820-rfce9sycre
SHA256 51e3dabeba898bc9383b50cf1438e312bde667416aaf2865d372225d8aba4dca
MD5 57e11c46453e085710cac8c592e911ab
SHA1 c8b694e9fd7e0a1948adace677206056e4651110
SHA512 26425758fc0fe2c0a291ad4145a9072e9939e3c1ca5ea714007fc65a7d0322e1d693f05eacca99e0b8ed838580595331580126685bd471e8d5f187350e60cde3
SSDEEP 196608:GQuwJBf7XEzvX7kDXhE3Z5OYnS3qlfrceLglWWEAjn0QDucIYLGfBW:GzwJ2rkFWZ5OQ9T7ElWWEAjn0QGf0
TLSH
T13747AE47FD6268EAE4AB8130897B5122BB363C448F2563C35B54EA603FB3BD49C76354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery execution spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

zstream-windows.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery execution spyware trojan

Behavioral task

behavioral2

Sample

zstream-windows.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery spyware trojan

Malware Config

Targets

- Target
  zstream-windows.exe
- Size 23.7MB
- SHA256 51e3dabeba898bc9383b50cf1438e312bde667416aaf2865d372225d8aba4dca
- MD5 57e11c46453e085710cac8c592e911ab
- SHA1 c8b694e9fd7e0a1948adace677206056e4651110
- SHA512 26425758fc0fe2c0a291ad4145a9072e9939e3c1ca5ea714007fc65a7d0322e1d693f05eacca99e0b8ed838580595331580126685bd471e8d5f187350e60cde3
- SSDEEP 196608:GQuwJBf7XEzvX7kDXhE3Z5OYnS3qlfrceLglWWEAjn0QDucIYLGfBW:GzwJ2rkFWZ5OQ9T7ElWWEAjn0QGf0
- TLSH
  T13747AE47FD6268EAE4AB8130897B5122BB363C448F2563C35B54EA603FB3BD49C76354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution spyware trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionspywaretrojan

behavioral2

defense_evasiondiscoveryspywaretrojan

© 2018-2026

Terms | Privacy