General
- Target Zero's Hub.zip
- Size 116.1MB
- Sample260908-bf62waar5v
- SHA256 8dc451e5f6bb50cff6053a161f33dec05290fd59ae98ef29cfba11abe998c781
- MD5 1c922ee22ea275357ea99002cdc6dbe9
- SHA1 110696814212cc41c7ad4f13f0456648c2b98c9e
- SHA512 425a69c753b121df321af1f2d7cf5a08a8466a32098494930ee6801c711ac9780001e3daa866c0e1288ec5cbc0e853efefc6a91d7379267c9305f93269d9fced
- SSDEEP 3145728:6odk5DMu7KHk8eqgXINANRPbxtcT1XfOI7h:REAI8kdqg42Nhttmz
- TLSH T1FF48330B63709EA0B2B9E13AD729E18173670520DD754F50AE1A438CFA772F99631CE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Zero's Hub/Zero’s Hub.exe
Resource
win10v2004-20260513-en
14 signatures
300 seconds
Malware Config
Targets
-
- Target Zero's Hub/Zero’s Hub.exe
- Size 180.1MB
- SHA256 1f430ee3da64c334fc9480f136dd4d8daf97e6ad064a59eab8c1ff983b4c7e56
- MD5 bfef29804f86b166b77802b6b7f6d7a4
- SHA1 b9369db68a58860d1456f2a58f7f523254a4963b
- SHA512 afe43fb31c6d983dd1cc275b0555ffc08e8510b3f8476ae165c6597fce512f3a98f895b0e32ca64ac746019f8efb163b5a879bca553a2bb9a1316647bd5fc460
- SSDEEP 1572864:RH0f0gqxb0WBFh/LVO9dyKcRmAswCXj5EtV4ga5h0q2ZOADpAyK5/Y3P8kbVr+qI:Wsok+hK7
- TLSH T19A988C03F39A50D9E01DD1B58B9B9633EAB1B8854324A2DF27540B512F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Modify Authentication Process
1Steal Web Session Cookie
1Unsecured Credentials
1Credentials In Files
1