161c5ab377479934f2ad6c618bef953f9095bbc488d1a456a2a927ab57e49a38

Sharing

Copy URL Twitter E-mail

General

Target
ZenithMacros-1.1.6-Unlocked 2 (1).zip
Size 107.7MB
Sample260824-3ld2tsdl2z
SHA256 161c5ab377479934f2ad6c618bef953f9095bbc488d1a456a2a927ab57e49a38
MD5 1fd9750bf1f84143e7dce90ba21ff2f7
SHA1 41686b89c1385bc9339387db44e3919e89fe7baf
SHA512 b0d8b99c3a019496cf20af33630a01606e8ad5c91a89ae20020a55b0ed7f4c523477b686a8aa3b84b23a258b8cecd9d31a94baac1fc1c80bf157ef4e161011a4
SSDEEP 3145728:9+kn5N4Gs62mMJicW/HMLQZKrGy0fRi2dbo:Ekn5N4GZOqviQZVox
TLSH
T140483364AA702497DB4B2C72BE48C19180C8C79745F3DC8CB50E4316C9BF766E769E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  ZenithMacros-1.1.6-Unlocked/executable/LICENSES.chromium.html
- Size 9.8MB
- SHA256 c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb
- MD5 0ff177fbf2a3873dd573077840e0b8f5
- SHA1 03d06bc7cd894399a5fc6600a0210f6e3226f92a
- SHA512 3264becd3103c905ab7f9cc034320885f18cbecaa45f582a4a9567ca4bcd620d64dc59fb03532964e775c35f07928a4497f5529cf1b9dc18379e4e9cff02ff8a
- SSDEEP 24576:K+QQM6Ms6x5d1n+wRhXe1BmfL6k6T6W6b6f6V6GeGj/3BIpx:LUzeGdY
- TLSH
  T134A6A52F7B48037706C642627B8BA5CAF21E903F3B561654344CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/lodash.isequal/index.js
- Size 48KB
- SHA256 e552928a511748303101cfd03826a777cfa359eade6a4a60f92c923edbf9184c
- MD5 a9554fb6b4b048098b9fb116ad78a833
- SHA1 8eb0d213a060db92f48885444420f8c8e367ad5b
- SHA512 b7c407f1ea7f48d321b763428996195d0ddb8698f05452dc7182295884a021d99683c7a2363be28790f7054d03c3e286719f1d14cfdd49b946897602f87c9eb2
- SSDEEP 768:24o6hZkXrXUnKC5WQJRBcqQ1Gf5RXj5qjoDGJLs/J6VqV1wINNRK6nqo6TJ6mV+F:K6hZMUWQHPpl5DnNqDZVj8qk
- TLSH
  T1EB23C9997EE7B155019750B486DE4A40EA9C851A223EB4C8708DEDF05F9D83C83BFE9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/mimic-fn/index.js
- Size 2KB
- SHA256 d4a832347a07a4df9b32a010fc5ffb1c4447c51769423cd5a3a47da0213fe5c0
- MD5 8cee4faa67357878549948e54dcc959c
- SHA1 d8fe030fd1fda123e9f03083800b0b257aee6352
- SHA512 468d616d7451ec84737c5d771e49954251cd21094d119514129658cf025335689f0a2c431762e97e8df89bc3e60690dc295288dabf7bed0eeb4b4ebb88f3cd70
- TLSH
  T12F51FD06FE62F63161D0D3D10D2E9D18EB2C13B064F0D3F3E7A9476A68D16C98379A1A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/ms/index.js
- Size 2KB
- SHA256 e5f0b6a946a9b2b356a28557728410717df54ea2f599edb619f9839df6b7b0e9
- MD5 83c46187ed7b1e33a178f4c531c4ea81
- SHA1 ea869663486f513cc4d1ca8312ed52a165c417fa
- SHA512 51b45089a53a23c12e28eb889396e2fa71b95085baa5ac34d71ffb625131bf2fec3ae98efeae537656e20ea257f44e089bcebc9ad54cf672cde852102e43e153
- TLSH
  T1CE51F2B128E6B201536A5334465ED195A89DBC23330F9EAFBCACD174BF8542181FACE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-addon-api/doc/error_handling.md
- Size 7KB
- SHA256 38b920a41c8cbc8d9cb0468f6d97751938b07538e3651f63681f7d937a160d64
- MD5 e860473d0b3d05a7724c5aa3a227c23d
- SHA1 d86ecc50da0a70a048b9f52cdadc7198670f3e94
- SHA512 2afc34a8cb504d5151708d981af7628baaba381dad9199f805f9ee1e48c82225257745e510e27be800d8c8f65fdd7340f6e80a2baa9416ff4d48f980b4d9f5f6
- SSDEEP 96:3/51O850KDjFWKiWjJgFxE2hpHqqBxWvrDGgs2TCXwag0gdijxvNkL:q85lYWB2hpNxMrDow9FdYu
- TLSH
  T144E17113FFA0B76302A301D5443F55F74D32AA4453266582D4EEC1391AD24EACAFB2EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-addon-api/doc/threadsafe_function.md
- Size 10KB
- SHA256 f2fdc5f161185fd2b92afc856886b980724bab8167d933547e74930f2bd95b42
- MD5 220702918fc0ae267e72e416fbe3a01a
- SHA1 f22fdd9918ec7305a6347eda64d3e6d29cfcd90c
- SHA512 33b4d571725835cc29f6919f4acf43e78174b6bbf29f76ee438a40544aee00c59bfead8a4824420167c171a21bc6d683a9dc2384a0949d3e384c94bae8627fd2
- SSDEEP 192:GwO8snRx6BzJiMsUnMeX9AHPIQlI8DZg83XseJfa:GwO8snH6BzJiMtlXmI/OvQ
- TLSH
  T1B8327609326923F29A1315F0992FA3AC4E73C0397B255191F0ADC3B82F5D46E4973ECA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-addon-api/index.js
- Size 1KB
- SHA256 95449dd6d9c8351a4bfd9614f721b2c6385f22aea00ec9374070e7d9e6d73911
- MD5 1f10950ce06beba1981ba53831f09229
- SHA1 1827e6482fbde236346344e8fadfbd2bfd59eb44
- SHA512 54c4661b10dc9963c450be7096e535e92696ebe1e2da0f852eb376df957a050c621c7a159c53f20f926cdc61bae97031e1e4ca21ca0fe9ded85c90f439860bb2
- TLSH
  T189214182B69882336420F3606F2D231ABB5D48790702C5A803BDF9C05B4487A0372B0D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-addon-api/napi-inl.h
- Size 128KB
- SHA256 45a113f136e791bc7b61299bfcd15d5c7ab7511078a50d9764e5787883ecf3d6
- MD5 35e31a1b49a77303d45f6e66cf2e1e81
- SHA1 ad22d02a8c084cacd1378769f922890737377a85
- SHA512 e834285d94b50f73a23e415b98de615729769986ba27e2c20f05843f6ea1b2bad9f2cbdac215405d84b8d8a87f413cdd92247e0b6f63c26138c4b3dce6c48ba0
- SSDEEP 3072:aPFdBq18E6gWwnOF2YyVJnwyIW/LEcDRzXfG62BpDNAUDJZ6:uq18E6gWwnOF2YyVJnwyIW/LEcDRzXfB
- TLSH
  T12CD394143AE6F1011A63A713682B9250AE19543B2F3CDF91F1DD77247F805EEB23A257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-addon-api/napi.h
- Size 83KB
- SHA256 142513e974615fa3c118a946088dd4b970e47c730f7f16b0d35210cb82c64210
- MD5 c5701fa3ab2b68810033be7e71e6042b
- SHA1 5156f79427084baec7547f5fd15c840094620ba3
- SHA512 2fc9ef974e3ad2275a9547dcc97066ce8c3a7184c97ebd0ffaeec988c6adcee67e75d4bd2c25500dbad4e87e3c720dbe7ed6e32c9b2ff59a08b5bbdf4f293655
- SSDEEP 1536:YclIeDEAj0tBKCT79RkL7PM2643lvinKRtqBxKgqzCfQeQnzK9K4KQKWlKKMHIbs:0zN7I643lvi2tqBMLn20
- TLSH
  T1328397057B52E7A20D9245D28F373262CB124023BF74D1D0B1EF570C6FA686AA3767A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-addon-api/tools/check-napi.js
- Size 3KB
- SHA256 f3264fd3f9dd9bc3e051cdcf72125d34617b2b06b914c49f1e1297e53cfd524b
- MD5 e0319363c4e8d95a44a00bf037061414
- SHA1 2e3895647ccdb1d20eea6c325d32f7e12f4d7f2c
- SHA512 3555a6f001dc983eaeb6f63368dc7c6c3962003b73f15991112e16e8942b90b83f8aa83e16ae35eb076db9422924b9aac00d7ad312b27589b10264fc249b3915
- TLSH
  T16C61109912FD12A340F7363A5B4E8029B22542A7432DDE24BE9D47183F9057283F2BE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-addon-api/tools/conversion.js
- Size 15KB
- SHA256 6b1396e690e34c32da14be3806d6923d737dec952f9714f5dac1190f580fcc45
- MD5 30b90f8461401d46691133e4ca389677
- SHA1 617fb26f253887104a0600719666732e712d0cc4
- SHA512 bf0f39adc80e1238451a7bc74ffb5ebaaf76e6752f346238dcc23d44c5e465df63db07ee5dc95ad61d1a28647a19a80409f84137e8f21e2a900b0ddd9035c261
- SSDEEP 192:85b2BOFlkjlyVK3y+lonvzINqXw29FjNqSL/8KC0VKNfbanDrQ6gy12R3NuO03Mp:Gya2LgvEFvKWjpPGCtBINjo
- TLSH
  T141628516BB77526208D262B55E3B47704B08B19D0FBC7811B56C73D16BE40DA02FBBAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/node-gyp-build/bin.js
- Size 2KB
- SHA256 dc022adc093b9b79e1a0ef4b6bc3e6a52e3d627102113dad4afacbbe81f13a26
- MD5 27bef0f18736d51173f33613f4fbdbca
- SHA1 206d61d4bef690f4d070b8da3029bd8144a0b2a1
- SHA512 0019e00ea632d62d2926010926f4cf33b2e146585f63b689fc51c61674b5da9b0ee626553ac2f552f0cd69fc849194ad607cb1830a72c1eba820f8f610381bc0
- TLSH
  T19A412375D8D9BD3837A32A29A55F6103F4BF9032415D5610FC86C2D13F6563802B3AED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/p-locate/index.js
- Size 1KB
- SHA256 8e5e49ae61d019cf6f74e59e114190fc06bafa85c2084d1731b3ccbeb445e572
- MD5 6a5e5e9fe8db48b83d75aaf731622812
- SHA1 fb45398285a3e43f7adffaeda9b2cc87797db9f1
- SHA512 a4214f059ead2c6085d2501584b5cc0b2b09d8aee361262f3f9202e02a2f0cc2f2d1699be1f829a0a48f30b9f579cdcbe252cea8fb2d2e6f440482909b516f0d
- TLSH
  T1BB11F04B5373B57356B432E5B94C5D0BA12BA4007C11CCD0709C29E021CBE55EED385B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/p-try/index.js
- Size 211B
- SHA256 98b069ba5ff64b0f988162a310c47110d5c121d42c33aa7314817393f453c9e3
- MD5 ea1e8f45acd1bd0014a3d4a4a445f8bc
- SHA1 885a5f2ed7229ecacb44d35396cd886fcec4e22a
- SHA512 9ddcb14e194b2c478d026d0dccdec47e4597d531150437343fb2f9275223108f7504d6b19dfea4b08d0f14ea70252aa065471aeaa64c5e794ffd012a83411147
- TLSH
  T1B4D0230B35736ACFD6CEF555D91D40DF0FC444203040513211992B4416C79E55540DC0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  ZenithMacros-1.1.6-Unlocked/source/node_modules/path-exists/index.js
- Size 252B
- SHA256 2557a5378ea2cab729e51b6fce5da24c782940d219a6bd6ade069190e919894f
- MD5 e77e0637039be02dd2a1bd4771ee48d2
- SHA1 dd6403171a6a2132ad8e110adcfe6e633f6a2b1d
- SHA512 a0bf48b041c398431d1efa0eb0cad1c953339b5a883a063fda2fa233f215978009a789396278a8874e43b35bb166a2367d44bca941df5668ce7cf8ae95448ba0
- TLSH
  T1D6D02B4B83F3A77E5B217C40EF1D504398C5C8821868E94940089588714BFD41060894
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32