General
- Target zkgoebug_x64.exe
- Size 136.5MB
- Sample260905-persfs1tgz
- SHA256 390fd400517d3a8d9e7143f1822550d66860fef3c4f7de54c0f80b1c9fcb5a69
- MD5 4f74e29f8b752e9d4ff2a55730e3c436
- SHA1 0813e3425f628f5a007a3a04384eba6547659a33
- SHA512 4653c6b2972ae5acf555d2bddb69fd6bb9db6bb0613118a3b636271da0abdd6f8738392c8bc62f40b6387a0c57670ce7c58f04ff8e6eab5929dcd8cb45d7ee0b
- SSDEEP 3145728:YC8rz5iOwhxJ84Ls5bIkak/7kl8fOsA0krnVmImhrm:YCOz5iOuxJq5bH/Ql+OstkrnCr
- TLSH T18A683393738FE13DF95A8B33A5B66B88A5F7B8253532BD102AE094D8DE366510D3C701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
zkgoebug_x64.exe
Resource
win10v2004-20260513-en
10 signatures
300 seconds
Behavioral task
behavioral2
Sample
zkgoebug_x64.exe
Resource
win10ltsc2021-20260513-en
10 signatures
300 seconds
Behavioral task
behavioral3
Sample
zkgoebug_x64.exe
Resource
win11-20260513-en
10 signatures
300 seconds
Behavioral task
behavioral4
Sample
zkgoebug_x64.exe
Resource
win11ltsc2024-20260709-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target zkgoebug_x64.exe
- Size 136.5MB
- SHA256 390fd400517d3a8d9e7143f1822550d66860fef3c4f7de54c0f80b1c9fcb5a69
- MD5 4f74e29f8b752e9d4ff2a55730e3c436
- SHA1 0813e3425f628f5a007a3a04384eba6547659a33
- SHA512 4653c6b2972ae5acf555d2bddb69fd6bb9db6bb0613118a3b636271da0abdd6f8738392c8bc62f40b6387a0c57670ce7c58f04ff8e6eab5929dcd8cb45d7ee0b
- SSDEEP 3145728:YC8rz5iOwhxJ84Ls5bIkak/7kl8fOsA0krnVmImhrm:YCOz5iOuxJq5bH/Ql+OstkrnCr
- TLSH T18A683393738FE13DF95A8B33A5B66B88A5F7B8253532BD102AE094D8DE366510D3C701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: clop
Ransomware discovered in early 2019 which has been actively developed since release.
-
Executes dropped EXE
-
Loads dropped DLL