3d8ece4fa4aea6549f3a9c40d304c3e57bb0a3d841cfc9f800f237e450315e84

Sharing

Copy URL Twitter E-mail

General

Target
Zynova.zip
Size 26.5MB
Sample261002-nv1jvszbmf
SHA256 3d8ece4fa4aea6549f3a9c40d304c3e57bb0a3d841cfc9f800f237e450315e84
MD5 eddf7be9f6569a2bcd890b137e04229b
SHA1 65614dc611b241b4818efd85d56486326e67e8a9
SHA512 9cf233f74e90a870ad3b73dfc3f8317d14a80dfee51c99509b7442cd514e026d1391b9ba32e2ecf7e10484348dcf080dcf343e3721b4231cec736d38f1baaf46
SSDEEP 786432:uV1ToGSubsc/YarC7BKBNvTUSXe4VD3oVW6HOzn:ucmYaCynFdoVbHWn
TLSH
T1C15733AD7400FF1E481C843DAD2FA00BA59CD574F1D2D4098A34566B2CFA4EFAEA7C65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Targets

- Target
  Zynova.zip
- Size 26.5MB
- SHA256 3d8ece4fa4aea6549f3a9c40d304c3e57bb0a3d841cfc9f800f237e450315e84
- MD5 eddf7be9f6569a2bcd890b137e04229b
- SHA1 65614dc611b241b4818efd85d56486326e67e8a9
- SHA512 9cf233f74e90a870ad3b73dfc3f8317d14a80dfee51c99509b7442cd514e026d1391b9ba32e2ecf7e10484348dcf080dcf343e3721b4231cec736d38f1baaf46
- SSDEEP 786432:uV1ToGSubsc/YarC7BKBNvTUSXe4VD3oVW6HOzn:ucmYaCynFdoVbHWn
- TLSH
  T1C15733AD7400FF1E481C843DAD2FA00BA59CD574F1D2D4098A34566B2CFA4EFAEA7C65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Final Zynova/Bin/Files/ZynovaModule.dll
- Size 3.5MB
- SHA256 dab7d1bfaafe1b00a524eba4351676888f8666c2d74ce5ccaa107d49b09b5e79
- MD5 d15339415ec76d70b87f9736440fb1ab
- SHA1 d59e269fd14cb65ca802f92d42d7480b54922762
- SHA512 f02f2f142ee8d6c558b56966e834a0966da3a34e4eb6771909d7422c6751e91629e3c797614d9bdc76f35e30266cbd126e6af7ddbcd8fb0c00924c4af22b609c
- SSDEEP 49152:hpKWWWVwWGgs6WPUjP8uP9xlt2UQsTbocE6r8Aeel3MxKhfvSyXH8C8r1pHsfN4Z:qa9Dp46Y63MxKhfvSyXc3
- TLSH
  T140069F2662E800E9C0A6C1BCD78B5A17E772B4451330ABEB16E486652F63FF15B7F311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Final Zynova/Bin/Files/emulation.exe
- Size 75KB
- SHA256 1b0cc37e1f3439fb88d6e350ba3a1b244c04dbcd0a2def4e290de06f01744f4a
- MD5 3648d1fa9f55cb7c114c395d39cbdc76
- SHA1 d5e6d76874e8f7a222fcb81435dff788042075c4
- SHA512 27b54507697c5843ecf7418dfadce0704ec1130cb5beb2e0c5c52936ad261a61e63acc8400b83ecc55d9b12b15b91e63d3b5f7cb3d8c307f86e3965614fb1d5e
- SSDEEP 768:1Ahj14eXrnr0prqBbSGJbF4U65vTpSysxvdXikgAu3lmFfsih+bxpZIUMcMIt4YS:aXA/Qy0HOWPChjR4Mj0zPqr3Jm7vg3
- TLSH
  T1557309258E6A50EAD23AD938C4123C47FF51B8854B95ABCF6B905DD30E52AD4AF3F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Final Zynova/Zynova.exe
- Size 28.5MB
- SHA256 3c00ee919b4e30197066e670cbd54ee8a9c9fad43d78e390307a60fad272acfd
- MD5 f1eadff53b0de21d7ce7395e84daf94f
- SHA1 66dccb6f311aa47f598d6c8977d83aa7eec510bf
- SHA512 a52d4dde989f2fafc5dd54c8963b8f8af65670d9f67c3082f7780e9982901679cbffa518daccb61b150d293f871579c2b7d5e392748fbf888dcf8ce6451f22f3
- SSDEEP 393216:A2AdEXIWMqDhG0FLdj1mg3UN2Oa2NVH8p99pBW7ys1x+l6UB+ENhC3GLbkKd+/s1:PAr7q9GUjYgPiNVcp9J5rD0ELC3Y1+E
- TLSH
  T1F36723A675D6B2D887C30A48638E13DB50C1B57645F994343EC71803E920DEF7A8AEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8