eb412825dfc1a0b00e58b2d29a68c0bfeafbfc135df976f05c47d4df6fd9be3c

Resubmissions

30/09/2026, 02:59

260930-dgt5taxvfw

30/09/2026, 02:54

260930-deandsxt8j8

Sharing

Copy URL Twitter E-mail

General

Target
ZyroExternal.exe
Size 1.1MB
Sample260930-deandsxt8j
SHA256 eb412825dfc1a0b00e58b2d29a68c0bfeafbfc135df976f05c47d4df6fd9be3c
MD5 7c057277037147046a5c0405c3a3dfc9
SHA1 368308612d7e18abb223398a9edb9d1f7e3469b5
SHA512 abcbf2453efba210d8c9e0b2a9ea2ef4c8120b95a86b2fc673724a566becd167212d2b003cf444682116c5b38d4c2d905a996ad5d46fd870a91a325223f695d2
SSDEEP 24576:NYmSpPjTgslN310W48BKd95bVnUPEVSixgng+r:mL1Dj4nxVUALxgn
TLSH
T153459D45B2F400F8E47B9578DAB5611BEA72785017309ADF13D00A592F737E09BBBB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Targets

- Target
  ZyroExternal.exe
- Size 1.1MB
- SHA256 eb412825dfc1a0b00e58b2d29a68c0bfeafbfc135df976f05c47d4df6fd9be3c
- MD5 7c057277037147046a5c0405c3a3dfc9
- SHA1 368308612d7e18abb223398a9edb9d1f7e3469b5
- SHA512 abcbf2453efba210d8c9e0b2a9ea2ef4c8120b95a86b2fc673724a566becd167212d2b003cf444682116c5b38d4c2d905a996ad5d46fd870a91a325223f695d2
- SSDEEP 24576:NYmSpPjTgslN310W48BKd95bVnUPEVSixgng+r:mL1Dj4nxVUALxgn
- TLSH
  T153459D45B2F400F8E47B9578DAB5611BEA72785017309ADF13D00A592F737E09BBBB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2