General
- Target ZadeyoLoader.exe
- Size 96KB
- Sample260822-e63nxseb65
- SHA256 c49f961b2f41ec9a1e2037e2a2edf39d2b87cb501706c55237a3934001644041
- MD5 5b012596bfafcab08a6e9a678f5355ad
- SHA1 63200912c9014879c4c90f92d7af209282aa8f93
- SHA512 12a9a42986603fdb79d4b2924e91961795fded522633f359f0312cd7595ec801fff79c131fde1e51924346b4922b8fe7dfea8fa6dd375d236af4ea845d8cf3b0
- SSDEEP 1536:fGpBrJ7pxkm+KvjQfpYYotRFpWMi2AJZeXma+6R6vbu:Er1NgfeJpcXemy6v
- TLSH T18FA3DF1633E5D146C6FF0EB62E7742421739FA63DE62D30E0AA8859D1D32F21CC68B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZadeyoLoader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZadeyoLoader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ZadeyoLoader.exe
- Size 96KB
- SHA256 c49f961b2f41ec9a1e2037e2a2edf39d2b87cb501706c55237a3934001644041
- MD5 5b012596bfafcab08a6e9a678f5355ad
- SHA1 63200912c9014879c4c90f92d7af209282aa8f93
- SHA512 12a9a42986603fdb79d4b2924e91961795fded522633f359f0312cd7595ec801fff79c131fde1e51924346b4922b8fe7dfea8fa6dd375d236af4ea845d8cf3b0
- SSDEEP 1536:fGpBrJ7pxkm+KvjQfpYYotRFpWMi2AJZeXma+6R6vbu:Er1NgfeJpcXemy6v
- TLSH T18FA3DF1633E5D146C6FF0EB62E7742421739FA63DE62D30E0AA8859D1D32F21CC68B95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL