General
- Target ZINCEXECUTOR.exe
- Size 16.4MB
- Sample260823-r1e2wsae76
- SHA256 e1bc13eeec4b05cd3bab4ccafa075d9dceb50250475258f0a3df7d43c856c145
- MD5 16ee0374fc09820b36e38e663ee61279
- SHA1 db22e49fc544e3d4c574cee453d7cf946af2168f
- SHA512 bb29476575d6a0700b186829c348a8be554c6fc3ac4df1fd6b6b673d08c43e83cad878e063fe31e062ff21d4e86efe2ac843e1fbc5196046d708d77b6a2270d0
- SSDEEP 393216:ze0LRywIgIfUKOcFXEAphVtnIwQSg+ezC+2tBIvF7dvplG:/l458KPFRphDBo+ezF2tyvF7w
- TLSH T10207336CB6914DB6F4FB413C59A1CA11E2F172502F96C6FF07F10A192E3B6904E396E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ZINCEXECUTOR.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZINCEXECUTOR.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
mypg.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
mypg.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ZINCEXECUTOR.exe
- Size 16.4MB
- SHA256 e1bc13eeec4b05cd3bab4ccafa075d9dceb50250475258f0a3df7d43c856c145
- MD5 16ee0374fc09820b36e38e663ee61279
- SHA1 db22e49fc544e3d4c574cee453d7cf946af2168f
- SHA512 bb29476575d6a0700b186829c348a8be554c6fc3ac4df1fd6b6b673d08c43e83cad878e063fe31e062ff21d4e86efe2ac843e1fbc5196046d708d77b6a2270d0
- SSDEEP 393216:ze0LRywIgIfUKOcFXEAphVtnIwQSg+ezC+2tBIvF7dvplG:/l458KPFRphDBo+ezF2tyvF7w
- TLSH T10207336CB6914DB6F4FB413C59A1CA11E2F172502F96C6FF07F10A192E3B6904E396E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target mypg.pyc
- Size 5KB
- SHA256 9d0529aebb64d4e2872ce9b0c2542cdb42764563e9129761fdeb3395a1deb590
- MD5 5d85648e5f4a60389c17eb5e64ba8a47
- SHA1 b0a95aaa37305e0df6429d0d5d9e387c79910ff8
- SHA512 0345de2d3414456db442addbd73764d88dd10cdef7d1a1ffba66b1ed7cfc962d626f06525cf8cbdf4470efa13583fd0568ed8ea7101a6d8b9d1b337be60c38a9
- SSDEEP 48:NAbDM/TU5XO9OGrmintVn1kQiQ5nDUkS7DbzDWDniN5/ETIBaPqhNpND5U2KwwSF:N0MuWOGrjntVbuBCjyEOaP8v15DKrc2y
- TLSH T146B1D8F504CC2713C896A03860F3F98467628542B7A24C0FFA04BCBCB68961D96E271E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10