2affea1375fa4414b202dca70f69e291b35984977ae7becfd48bd0697bd5b374

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 07:37

Target
Z0BPcTools3.exe
Size 1.1MB
Sample260823-jgb7wsyzey
SHA256 2affea1375fa4414b202dca70f69e291b35984977ae7becfd48bd0697bd5b374
MD5 2f3b170accbb13755849b9197ff29868
SHA1 d7c7d19ecb806ab8adaa2e9db20b3248029b1d70
SHA512 8b03addb14aa7f9e887f8b7076cc203216a922ad7bbf3aa7990af02310659d52d0d7c5dd3aca2a544a0f2d059fd8a7abc662a48eb0b61b79dc172277c7424db0
SSDEEP 24576:iUVNvqH2jrqjxnpvDaa3FTbW9h4qPnorRzJ99N6e:zBqAuxnZP1TbWAkoB99
TLSH
T1DF352390DE521CF6EE9846B41C8B8676255D6B32B7EC3B40DBACD696F430F31B921603
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/8-0-0x00007FF70D810000-0x00007FF70E6E9000-memory.dmp	upx
behavioral2/memory/8-1-0x00007FF70D810000-0x00007FF70E6E9000-memory.dmp	upx

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
8	Z0BPcTools3.exe

C:\Users\Admin\AppData\Local\Temp\Z0BPcTools3.exe
"C:\Users\Admin\AppData\Local\Temp\Z0BPcTools3.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:8

memory/8-0-0x00007FF70D810000-0x00007FF70E6E9000-memory.dmp

Download

memory/8-1-0x00007FF70D810000-0x00007FF70E6E9000-memory.dmp

Download