Overview
overview
5Static
static
5Bin/Files/Patched.dll
windows10-2004-x64
5Bin/Files/Patched.dll
windows11-ltsc_2024-x64
5Bin/Files/...le.dll
windows10-2004-x64
1Bin/Files/...le.dll
windows11-ltsc_2024-x64
1Bin/Files/...on.exe
windows10-2004-x64
5Bin/Files/...on.exe
windows11-ltsc_2024-x64
5Zynova.exe
windows10-2004-x64
5Zynova.exe
windows11-ltsc_2024-x64
5General
- Target Zynova.7z
- Size 60.7MB
- Sample260930-ptpxeaycmd
- SHA256 6a5cef231985c1231aca3887baecd5d4de708f08bb79cad15a669d60f8d17536
- MD5 e6acc8c212694a4f5821a83174aba1ce
- SHA1 3ec6de38c7d78391f9d7f94569459ccce4551cce
- SHA512 95aa90b7636c7ace1d24637cafd81aaa930e07c8e407bdd805de1db961ed3145da4008eac342f3764c4eeae14a9dc414585192139268a511be4b80a1a5a1d202
- SSDEEP 1572864:OYhqTCVHulilIqNCCmeeoPZDaLWpkTMqCSr1JBw2NGET:OYw6eMCXeeoULMIMNQavS
- TLSH T1D7D7333B5344BC67D4CD863998321A64A1CC6B2813C2F62A59758D40C1DBEFF7A77A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Bin/Files/Patched.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Bin/Files/Patched.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Bin/Files/ZynovaModule.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Bin/Files/ZynovaModule.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Bin/Files/emulation.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Bin/Files/emulation.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Zynova.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Zynova.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Bin/Files/Patched.dll
- Size 21.5MB
- SHA256 d6f60d53135dfc351c65936f99739bb3349d2d17474eeaf8d53d2d8474c73848
- MD5 53242f23486a77471a3a039c642024b3
- SHA1 144c456414ed34c0ee2472ab7dc8612ba8d147d1
- SHA512 cc54dfe267db1491af99b488dfabf47988619aaab942457d289d48e1596f8dbe6c2552a61802013cbbc3e7dd9a1a8d81d3e1d34c9bb4797b6f74565b6b9f0f7c
- SSDEEP 196608:xHHpfdBLwIb6MvbVBOGWE0ymAcKtbidzvSApDC:xpfwLlydJtWC
- TLSH T10C37CF4EF8D60AE4D17250B1E55F56D3EA66304C4A6C2EB783D90320367369EB248F6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Bin/Files/ZynovaModule.dll
- Size 3.5MB
- SHA256 0bea2e3888978397d79f06f070303e036a0693a239fdc5b8f9c7bfbb97a2f850
- MD5 8de4eef4ea1daeffa3b8310c6e10a64e
- SHA1 e36cf3400bae0e3306a7bc0d53060f2e2ec7fddf
- SHA512 16e634d0b1a3b4aaf57b9c9385eca3a0dd32f903bce5df4d0794d65959b267d31a3517a357a18da0e8a57b89c3eb57c6f821e4f1c964b9b58a22922c741722a5
- SSDEEP 49152:iNaSAelexBMQ9ooMlWzaCSWMHPNwg9mchshMnCgs:IaT9oRlWMPHPNwg9mchsQs
- TLSH T19EF5BF9E72AA45EBC097C27CDFD2A923E2F1390123517BEB6681852D2F13BD046F8715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Bin/Files/emulation.exe
- Size 32.1MB
- SHA256 6140aa8327fc6df9037cec2a9348f78356f88a7f2877e07aa793b28aea3b56bd
- MD5 be2c860a7c83a9693c3db44e09bead8f
- SHA1 e150cd38be8b34cb8bc61f6d2634292c21e0cd45
- SHA512 471188e4510eebc197676fe9c935d4a7ae4f4f1f51144e536f27236b93443612699684ab71964df7057a4899ae351663fa2c97583c61ff8ef416c6c9cabfc484
- SSDEEP 393216:VxRZKw1pIHYM9iXqHrzJ40rA7mobz8jYKjvuN6EneS+KJEIVHNZLvaOXB1OaDpUv:DRZKw4Y81Hm6YuG6EmcPXBcalUCRun7
- TLSH T1AC77239A66E5F3C48BC34984278E11DA21D2A4BE84EE453C3EC75C03A534DEB559CEB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Zynova.exe
- Size 28.5MB
- SHA256 3c00ee919b4e30197066e670cbd54ee8a9c9fad43d78e390307a60fad272acfd
- MD5 f1eadff53b0de21d7ce7395e84daf94f
- SHA1 66dccb6f311aa47f598d6c8977d83aa7eec510bf
- SHA512 a52d4dde989f2fafc5dd54c8963b8f8af65670d9f67c3082f7780e9982901679cbffa518daccb61b150d293f871579c2b7d5e392748fbf888dcf8ce6451f22f3
- SSDEEP 393216:A2AdEXIWMqDhG0FLdj1mg3UN2Oa2NVH8p99pBW7ys1x+l6UB+ENhC3GLbkKd+/s1:PAr7q9GUjYgPiNVcp9J5rD0ELC3Y1+E
- TLSH T1F36723A675D6B2D887C30A48638E13DB50C1B57645F994343EC71803E920DEF7A8AEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger