Analysis
- user interaction
yes - max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/10/2026, 20:02
Behavioral task
behavioral1
Sample
Injector.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zynova.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
ZynovaModule.dll
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
bin/RobloxPlayerBeta.dll
Resource
win10v2004-20260911-en
5 signatures
150 seconds
General
- Target Zynova.exe
- Size 34.2MB
- Sample261020-yr6a2set6x
- SHA256 81fe22bc65157970ec78978be80d0ab6c64d3cef33f38067758b6ce4a3906c46
- MD5 841448cf06e1ac1cf2b1b41be38738ea
- SHA1 a2bd7380216f4b3bcc519f824f8497c322e4539c
- SHA512 29ba63f578307335e6e4753af0512f2aedfa99a5e05084a4fef9932f1dc4ce028cd66686d8b512d27414a92cb1d9504c208a3380f5bdf3eb0a53a2408d64a3e6
- SSDEEP 786432:LSqlZXGX4zWIaWrzoWt/KwWALGy0d+EBO3yTdUcd/HA:5TXGcWIaWrERBMFEBiyTdZPA
- TLSH T1A37723A364D862D4C3C30544A24E43EB51C1A57D85FE982D2BC72C026E35DEB5A4EFBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs
pid Process 1612 Zynova.exe 1612 Zynova.exe