ХZlосitуХ64-v.9.537.zip
- SHA256 4dfb5926d941a55574b5145181ce8a51b46096764b8331cb017c9f599adc6319
Password
2026
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ХZlосitуХ64-v.9.537.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
ХZlосitуХ64-v.9.537.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
General
- Target ХZlосitуХ64-v.9.537.zip
- Size 4.1MB
- Sample260903-ry4bpsygre
- SHA256 4dfb5926d941a55574b5145181ce8a51b46096764b8331cb017c9f599adc6319
- MD5 48c08fc283ad99d1dbad4961d982875b
- SHA1 e42f840a26fa583e2f861f8be5cd493a137722eb
- SHA512 2e3753883471b2c9cd29356f8b7269f750d7295ba094e573631b15550d80180900b15c13f1cfba325a42deb94e7cb7ef2afc0e2cbac47d2f00c34fb8c1358bdf
- SSDEEP 98304:2r1ULsVMNDlFqYzDWhT8Cmby4PXu+Q7O6fstfneNgRGVTDMLWAKmERi5:2hM9vd9XuJC6fgeqR2TD8yRi5
- TLSH T1541633DD5684E0B98213B8CE0767B84538318AE1FBE798D1750D5539A3BA3AF0DDB80D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/хzlсtХ64/ХZlосitуХ64-v.9.537.exe
File Explorer
-
ХZlосitуХ64-v.9.537.zip.zip 4.1MB
-
README.txt102B
-
хzlсtХ64.zip.zip 4.2MB
-
хzlсtХ64/locales/hi.pak787KB
-
хzlсtХ64/locales/locales/th.pak704KB
-
хzlсtХ64/locales/locales/tr.pak357KB
-
хzlсtХ64/locales/locales/uk.pak605KB
-
хzlсtХ64/locales/locales/ur.pak532KB
-
хzlсtХ64/locales/locales/vi.pak424KB
-
хzlсtХ64/locales/locales/zh-CN.pak308KB
-
хzlсtХ64/locales/locales/zh-TW.pak305KB
-
хzlсtХ64/locales/resources/vi.pak424KB
-
хzlсtХ64/locales/resources/vk_swiftshader_icd.json106B
-
хzlсtХ64/workspace/.tests/readfile.txt7B
-
хzlсtХ64/workspace/.tests/writefile7B
-
хzlсtХ64/workspace/.tests/writefile.txt7B
-
хzlсtХ64/workspace/IY_FE.iy539B
-
хzlсtХ64/ХZlосitуХ64-v.9.537.exe.exe 9.7MB
README.txt
- SHA256 43fa5c8b5c84c325795b571cc864e419cc97b818f3c4806f38043a4cb2f6ef95
- MD5 ef8ce5024d7871c3f95536cc02958b9e
- SHA1 b6309c55867e099fcf5a95b3d144df0e99aac173
- SHA512 c24cd67d4c399c5059a08728bf26d8c556e8229dddd20439e547edf9de3f17572457c8f23fef4a3884e8e59d7eb43ce40d92f2c0ba521d1b2111b08e12dd9f8c
- TLSH T163B092620269A49193D0E099AA4A16F2469A480AA01A8640B174D16837A404A1A6269A
- MD5 SHA1 SHA512 TLSH
хzlсtХ64.zip
- SHA256 d8ba873e6d206da66249681659e084cc5a1e0e76c8f1150ed442b5ffb7fa477c
- MD5 4cf91da453ec3c02f7ccdaf04fa2c8b2
- SHA1 a954d0ebd02d105defb6b63c1b44ae7b4b16f699
- SHA512 e3f8d2df13f026d203f3613a00c6a3cc933c433a9446d396b702c807b2ed6d3a80928140e9cc0c1b73e6429d68980944172f10affa41eb5110ac1b88f4cd50a5
- SSDEEP 98304:Zi2xwQQsLBgG1+pA8q82WnbtaZ9Gmk1y/hIbkVjrSO0qf6y9YsHUsm9jI6mk2nDy:vqQTBgG1d7InbgZ9Gmk1srVnSO0SO19N
- TLSH T1531633A028BEF4F1B1251976176AFD110E0F3C8E041A7EDB6C99A790465FCC918B4DEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2026
хzlсtХ64/locales/hi.pak
- SHA256 eda355e3785313e3d982c1d3652266dce1b6e08832056fe58854b825e0712ca5
- MD5 1185163466551aacae45329c93e92a91
- SHA1 0dcbfed274934991966ce666d6d941cfe8366323
- SHA512 6fad3e24eb868acf78db0591c7ba77abc84e92cda28e8bffee435ea89940a8607e7628c6c5159349377a8d933f373db2dfa4e5715ca404bc3e67fd4a0f22a606
- SSDEEP 3072:4m//Yxz8BS65Ob5EeQzFc67R7dk5Sv34QAEm5dmLrsoe4GR3doInN8edYbOqGPt5:rYZ895O9ExFlReg5R5HQO4
- TLSH T11805180CEBBEF3B55DEC3C8A32890D37D59D3674A3E9521348D5B3DB9844CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/locales/th.pak
- SHA256 4fe2b7b6886e3ce068be0b7a0a71d45756eb797eda1e7d4fad52ab8a370e8336
- MD5 85f59bf2f1167e34ab2b666608805420
- SHA1 f0d8e8fc644c15c52c5f9d3419f88e6072799736
- SHA512 86d6061895c996ad1caa3f3871c014b656e7ba7bb91f05c72a591cb5877c3db61965bc1a5094dcf7c4127d11f8106622355464704fd0695372627d8400a16ddd
- SSDEEP 12288:kCoJR/3RMVqsUs5Uv/cLRflrj87rS6DotyeuLADu7Kle9don7j9Fo09XAyFHPL4i:poH25p5p
- TLSH T142E44BB33247D9D479441B5B262A7789673DAE693F73F8E00489215A73F071A8422EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/locales/tr.pak
- SHA256 5df18798a35b502a18fb4f82e9b03b7ca100903ecd5d192ab2a3f0bc7646c366
- MD5 da4c47bef469c086cdb7e5b74310304a
- SHA1 9f0569659eb21261003a232d5d92d3aae8d47b7a
- SHA512 55c745cd8d0aba6f4a2454c494b80eb4cc74f733771e7279b9033d52716551a85154e9eb31eebe17dce05ba71e0213e581c4b98b59a6b88aa8b9569c411e397a
- SSDEEP 6144:GqgGhItL0rKiPxTcQXKVSIOD7rB/78GgeD58/D+iMi1AxZE9VwiBsJm7:JhIN/i5TTmUrZ7f58/5
- TLSH T1FE740A8178EF382C8BB9278FD2E50626F99F0766F331E4469A169636774674703F620C
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/locales/uk.pak
- SHA256 3fb15957c77f3635aa7cfca796b045a1ee1f1abfc0c12c163cfb537364f3c80a
- MD5 229325584cd98c8408f7fc5c5603c6de
- SHA1 dd31356ede30833a138fc3a6b8838cef89344a00
- SHA512 3b57f57649877700f03aee73bc6e6e863ad65ec7c13b9851a3fc7e5d06d11ea154ce087d0a64dc689cfc55aca9eb6492154c9eb18130f6d17b8d94ac8c37a6df
- SSDEEP 12288:c5cHmNYribnlyvk7KQ0N1nteW51B3IjNtE6TxLNiXEFqIDV2:c5cP+kT552Ef
- TLSH T10BD488B19A9D58DF0105F05BE84C7A0D7DA741FE7FA6871625A43DBF28F20248A3C71A
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/locales/ur.pak
- SHA256 06a0c18d978b54dd163c7f77b7ee0f2ecf3607c5dc14032326f21b4a1f304d81
- MD5 6310a289e55b1022f12b4f3cc29fe831
- SHA1 150d81ec8db4d9aec6c0e83e5577dcb7f1956b38
- SHA512 acb538fce25486e6a01401aa0e9204a6f519cd1dfbca48663d6142e1fb6280bab271dfd2b4c5ddc858de6920805e539b791c48eddcad124d0aae298d479dcf48
- SSDEEP 12288:K6Du8PzOYzXPyn+jAcMR5RQEA2WzRbQYrkuvco/9NjjFpvUu:cYiD59WZ
- TLSH T115C410D1E6BC92B25A21D92780E33C34CB635F13D34BF286E56106C54E9A1136F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/locales/vi.pak
- SHA256 f1602637e7f3e0a908d7a9a3f630b8dd38bfd26704cc64ef432d2c88a1ee7017
- MD5 1b1b14f542bb4a9f014d1801fb2e4007
- SHA1 0f56c35b2515fc92690126c54d57aa763a5c3288
- SHA512 3e98c44ad74d905fee06851eab16576f6261a15336f1c1f625f646af725988b75957ed89c16876ec6127150e2b28778a5b65f897b9540ad1e4cec98be705cde7
- SSDEEP 12288:PJnzrvsPgnzj0VyK1wSMTgG9lt5uEHziW+UH6JziV1ZH:xnzTsPgnzj0VySwSG1n5/TiW+UaliV1N
- TLSH T1A094861216E0702680AC553EC5CE540E6FCAE42FF7808FE57FE4297576221A56F21BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/locales/zh-CN.pak
- SHA256 97fe793b325d0c27669f62235bd157c51a3e1aeaffba30e7fe028c9d64939c5f
- MD5 32b1659c7abe8a01a702e46c69f0a3ce
- SHA1 43eba1f94417109834f25006a81653bf635ce9a0
- SHA512 72b932cb9e19788a67a1a7beaea0b9b076af0a5f1c568f9d2d6e8653d3c9fd4bc17db1a39db1f12b8184112b8e67125f443b8b2b60f31e62e16ef9c6a8e2c4a6
- SSDEEP 6144:ZdzIbmDPgQyQ74nqKm0YnHrYE85UN6RregFlo:DEm8QunqKRYnHx85UN6Rr4
- TLSH T18D647EE900FDBDEC054640902724617E7980620BF667AFB77ED244ED27A2F9E0757A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/locales/zh-TW.pak
- SHA256 280ba35171dfb6a54efb13fc4ddedc13a0283a9a6eebff4c15275767beb4ba77
- MD5 14f3f547a54713f91251b38459a096b5
- SHA1 02ac592a2eb4a7c6631dad5aae83726ef9c33ec0
- SHA512 0ad8c6a6eb0dcbcbbf6f9e114c93bc2cf6004dfa9ad7b68dba31c2a9856c0a56acb66507f65b1823434b1ad362c1ac812b72c254e5329a2858e888a761f45ec1
- SSDEEP 6144:c0oQX1m/Xs2eI7uhvxO4/x5wuznWMc/9yJTl:cQX1m6IaxO4/x5wuzWZ/u
- TLSH T151646CA608FFDEEE0901F884B3C9462F7C8B742CDD377637FC4918992E76A541A5214A
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/resources/vi.pak
- SHA256 f1602637e7f3e0a908d7a9a3f630b8dd38bfd26704cc64ef432d2c88a1ee7017
- MD5 1b1b14f542bb4a9f014d1801fb2e4007
- SHA1 0f56c35b2515fc92690126c54d57aa763a5c3288
- SHA512 3e98c44ad74d905fee06851eab16576f6261a15336f1c1f625f646af725988b75957ed89c16876ec6127150e2b28778a5b65f897b9540ad1e4cec98be705cde7
- SSDEEP 12288:PJnzrvsPgnzj0VyK1wSMTgG9lt5uEHziW+UH6JziV1ZH:xnzTsPgnzj0VySwSG1n5/TiW+UaliV1N
- TLSH T1A094861216E0702680AC553EC5CE540E6FCAE42FF7808FE57FE4297576221A56F21BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
хzlсtХ64/locales/resources/vk_swiftshader_icd.json
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH
хzlсtХ64/workspace/.tests/readfile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
хzlсtХ64/workspace/.tests/writefile
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
хzlсtХ64/workspace/.tests/writefile.txt
- SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
- MD5 260ca9dd8a4577fc00b7bd5810298076
- SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
- SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7
- MD5 SHA1 SHA512
хzlсtХ64/workspace/IY_FE.iy
- SHA256 73bb58ba5b81960caf5a8e66675cc89b5761b77db99c6ceb9435f7211d400452
- MD5 291d5636a434c4f1ceb0f3f776c2a51f
- SHA1 ae287e08f71c522a72812f0dace94b8ffb569341
- SHA512 7dab8034f85aef1b2b7a86cc8220ebdbb95a3f083d1565e1cff38414367aa69fc597a11aaba11dbef411e13fbfb285855d9c46ae59738f6e88c22dd55c81a743
- TLSH T1F7F02B6E530C0ABAC0515260D63531BFC6FF4EB73020D855A5BC1D6D13EAEA24E70903
- MD5 SHA1 SHA512 TLSH
хzlсtХ64/ХZlосitуХ64-v.9.537.exe
- IMPHASH f0ea7b7844bbc5bfa9bb32efdcea957c
- SHA256 b3b3c8deb411de3b17aad144a1116198ab1026eb020e765c9c2e23bc40ee5c4f
- MD5 6a07d3665f34da3a5b1b1fa37d0b2df4
- SHA1 3f8ebefa48c32f40c1d80ef93ef1147028c6e150
- SHA512 7fc0f81ba722a664872ccc502b1e492c18f37aaa3842082e8e48443b56b319e32dca32d52ac9563eb1aa11c58ae81b7f1038269942a0c421a0959b52b7a98153
- SSDEEP 98304:lFzy78VTgXYXIrYVGQA7tN3PZPM2YlVJ85:lFMczXIrY67tN3yF6
- TLSH T119A65A03659452E8C889EB38D17B527AABB0F8CDE73672876D82747C2F297E16C35740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
2026
PE Signature issue
Digest
a9:2f:33:f2:4e:cb:cc:b0:73:3d:9d:e1:9c:27:74:69:23:ba:e5:b6:77:37:25:5a:36:62:0c:a5:06:aa:03:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Prime Fabric Partners,O=Prime Fabric Partners,C=US
Chains
Sep 3, 2026
CN=Prime Fabric Partners,O=Prime Fabric Partners,C=US
Subject
CN=Prime Fabric Partners,O=Prime Fabric Partners,C=US
Serial Number
98:21:14:fc:ef:73:2f:3c:5e:53:95:56:14:31:c4:59
Issuer
CN=Prime Fabric Partners,O=Prime Fabric Partners,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 27, 2026 - Sep 3, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
1
Major OS version
6
Entry point
394080
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.6MB
Virtual Size
4.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
108KB
Virtual Size
465KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
93KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ