Analysis

  • user interaction
    yes
  • max time kernel
    28s
  • max time network
    15s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    26/09/2026, 23:01

General

  • Target
    Zeogen-main/Zeogen.exe
  • Size 6.6MB
  • Sample260926-2zpj2stbme
  • SHA256 43717d6c756379b64d7f8289e2bcd7a585ced7fcde720db6171a190de648dbd2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Zeogen-main\Zeogen.exe
    "C:\Users\Admin\AppData\Local\Temp\Zeogen-main\Zeogen.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1608
    • C:\Users\Admin\AppData\Local\Temp\Zeogen-main\Zeogen.exe
      "C:\Users\Admin\AppData\Local\Temp\Zeogen-main\Zeogen.exe"
      2⤵
      • Loads dropped DLL
      PID:416

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16082\VCRUNTIME140.dll
        • Size 94KB
        • SHA256 ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16082\_ctypes.pyd
        • Size 124KB
        • SHA256 11daef02afe45d9f3987bab5c2b6ef75b2b6f6f79704c45675d532f090f14b8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _socket.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16082\_socket.pyd
        • Size 78KB
        • SHA256 a611e9b4f4e5fe67e945b771d79cf15c48441ecfa11ce186cec9bf233dc20c0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16082\base_library.zip
        • Size 782KB
        • SHA256 5449b83d63a75a618e4cd2272324cde2e61d496739ecd7c30ab2e6fd0d9b29d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16082\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python39.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16082\python39.dll
        • Size 4.3MB
        • SHA256 f4609ec3bbcc74ed9257e3440ec15adf3061f7162a89e4e9a370e1c2273370a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        select.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI16082\select.pyd
        • Size 28KB
        • SHA256 cd31f9f557d57a6909186940eafe483c37de9a7251e604644a747c7ec26b7823
        • MD5 SHA1 SHA512 SSDEEP TLSH