General

  • Target
    zx.zip
  • Size 10.0MB
  • Sample260924-bcztdsys2l
  • SHA256 347e0575413b639a35d18c4ecdb7729ab838cf8836ef7fbc8b64c319846f3763
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://github.com/rrcyber/ZX/raw/refs/heads/main/zx.zip

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • zx.zip
    .zip 10.0MB
  • README.txt
    341B
  • ZXTERNAL.bat
    105B
  • libcurl.dll
    .dll 638KB
  • msvcp140.dll
    .dll 628KB
  • skybox\sky_bk0001.bmp
    12.0MB
  • skybox\sky_bk0001.png
    .png 561KB
  • skybox\sky_black0001.bmp
    12.0MB
  • skybox\sky_black0001.png
    .png 20KB
  • skybox\sky_dn0001.bmp
    12.0MB
  • skybox\sky_dn0001.png
    .png 16KB
  • skybox\sky_ft0001.bmp
    12.0MB
  • skybox\sky_ft0001.png
    .png 484KB
  • skybox\sky_lf0001.bmp
    12.0MB
  • skybox\sky_lf0001.png
    .png 447KB
  • skybox\sky_rt0001.bmp
    12.0MB
  • skybox\sky_rt0001.png
    .png 950KB
  • skybox\sky_up0001.bmp
    12.0MB
  • skybox\sky_up0001.png
    .png 1.3MB
  • vcruntime140.dll
    .dll 174KB
  • vcruntime140_1.dll
    .dll 48KB
  • xxhash.dll
    .dll 57KB
  • zlib1.dll
    .dll 86KB
  • zstd.dll
    .dll 640KB
  • zx1.exe
    .exe 4.9MB
  • zxternal_updater.ps1
    .ps1 3KB

zx.zip

  • SHA256 347e0575413b639a35d18c4ecdb7729ab838cf8836ef7fbc8b64c319846f3763
  • MD5 SHA1 SHA512 SSDEEP TLSH