Overview

overview

7

Static

static

3

Zuls Premi...11.exe

windows10-2004-x64

7

Zuls Premi...11.exe

windows11-ltsc_2024-x64

7

Zuls Premi...ro.exe

windows10-2004-x64

7

Zuls Premi...ro.exe

windows11-ltsc_2024-x64

7

resources/...fy.ahk

windows10-2004-x64

3

resources/...fy.ahk

windows11-ltsc_2024-x64

3

resources/...ex.ahk

windows10-2004-x64

3

resources/...ex.ahk

windows11-ltsc_2024-x64

3

resources/...on.ahk

windows10-2004-x64

3

resources/...on.ahk

windows11-ltsc_2024-x64

3

resources/...se.ahk

windows10-2004-x64

3

resources/...se.ahk

windows11-ltsc_2024-x64

3

resources/...xe.ahk

windows10-2004-x64

3

resources/...xe.ahk

windows11-ltsc_2024-x64

3

resources/...on.ahk

windows10-2004-x64

3

resources/...on.ahk

windows11-ltsc_2024-x64

3

resources/...ll.ahk

windows10-2004-x64

3

resources/...ll.ahk

windows11-ltsc_2024-x64

3

resources/...er.ahk

windows10-2004-x64

3

resources/...er.ahk

windows11-ltsc_2024-x64

3

resources/...v1.ahk

windows10-2004-x64

3

resources/...v1.ahk

windows11-ltsc_2024-x64

3

resources/...oc.ahk

windows10-2004-x64

3

resources/...oc.ahk

windows11-ltsc_2024-x64

3

resources/...sh.ahk

windows10-2004-x64

3

resources/...sh.ahk

windows11-ltsc_2024-x64

3

resources/...or.ahk

windows10-2004-x64

3

resources/...or.ahk

windows11-ltsc_2024-x64

3

resources/...ig.ahk

windows10-2004-x64

3

resources/...ig.ahk

windows11-ltsc_2024-x64

3

resources/...pt.ahk

windows10-2004-x64

3

resources/...pt.ahk

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Zuls Premium Macro-Setup-1.0.11.exe
  • Size 74.3MB
  • Sample260913-kwdvpser31
  • SHA256 d7f0d7ef3749d69eb0a794238629e909c0b28f08fbdd1f269acf3c723a06ca71
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecution

Malware Config

Targets

    • Target
      Zuls Premium Macro-Setup-1.0.11.exe
    • Size 74.3MB
    • SHA256 d7f0d7ef3749d69eb0a794238629e909c0b28f08fbdd1f269acf3c723a06ca71
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2
    • Target
      Zuls Premium Macro.exe
    • Size 164.7MB
    • SHA256 a555528e67f4216e825977361039f8fc5f68bbc0580445ec13529d4a1bc813c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral3behavioral4
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/inc/identify.ahk
    • Size 1KB
    • SHA256 f5b97911887c303b6859de44eff73780309e31e931dcba86a66aaafbe932af72
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/inc/identify_regex.ahk
    • Size 3KB
    • SHA256 c2563ab626df892398083404acecc5229300ba7dc6077b120844c65facfad854
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/inc/launcher-common.ahk
    • Size 2KB
    • SHA256 220629b006d13b24afb3367abeea424c5b4103ac0c5a137fdc9d98047cdd908f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/inc/ui-base.ahk
    • Size 4KB
    • SHA256 deffd87d99ff125eccac2331a8ba4e3a0044e150e80316e9469dd57f322beda1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/install-ahk2exe.ahk
    • Size 1KB
    • SHA256 c242ebb51241acab13152d95cdb05be5382ffb97f3dca2da3a4e5a084c2e3ff4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/install-version.ahk
    • Size 4KB
    • SHA256 1e59921bcddb3c41651eb01605cdefcdee3c6adec5db6b7cafb7ab801ead5e1e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/install.ahk
    • Size 40KB
    • SHA256 f628edfece15db0061fdfe96724266a3cfaaec396524a94b574e22e6e3970c40
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/launcher.ahk
    • Size 17KB
    • SHA256 830db4be4c8320f23ff32316dac933d4e72d9056ea5a819cc12c38614da6e06f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral19behavioral20
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/reload-v1.ahk
    • Size 556B
    • SHA256 e4659306a755b583e9cef5fdba3b3eb102d8939fb028afd91aad4496e758fad5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral21behavioral22
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/reset-assoc.ahk
    • Size 2KB
    • SHA256 d26caef44190e0b612c3e4309ff6689dc2953c72cb3de1c94d002250b089f16b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral23behavioral24
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/ui-dash.ahk
    • Size 6KB
    • SHA256 e8c0b4e149ad58c57e77aac12041f1fa8bc9f25c6d642d12837efc5fd97b8d21
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral25behavioral26
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/ui-editor.ahk
    • Size 8KB
    • SHA256 7263286eb3a42eccf5edc39b43c74a8bf7c82f2671204d1ae654236c1de3f05d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral27behavioral28
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/ui-launcherconfig.ahk
    • Size 8KB
    • SHA256 179c96d787fae5dd26cdf832e5226142ab3e4f1ff53e3b1f24cecddcf3e79947
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral29behavioral30
    • Target
      resources/bundled-ahk/AutoHotkey_2.0.19/UX/ui-newscript.ahk
    • Size 10KB
    • SHA256 31249ef15cce83d150a9a5de11168a5052ff2c55dbd574b8df1c054510b61843
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

discoveryexecution
Score
7/10

behavioral2

discoveryexecution
Score
7/10

behavioral3

discoveryexecution
Score
7/10

behavioral4

discoveryexecution
Score
7/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10