1414bd17d5503b52aded84c3d510a5de67c483cf7c41b9d49079040bea0fd8ae

General

Target
zynova-110.zip
Size 58.1MB
Sample261023-qdpgdad14m
SHA256 1414bd17d5503b52aded84c3d510a5de67c483cf7c41b9d49079040bea0fd8ae
MD5 4a5dff977fa7239290cf2e47e1b980d6
SHA1 b49670d35c9d7dd4f84b4d3f01f1b9704f6eeee3
SHA512 2ea29d6c2d90d025929e44370fe8ab256aba78fd1e64dd8f4874c20912ff42ee5c68f59569d37777761f5f3bd1c4053a70d96eb1e234669f9eb7a8ae23bdf307
SSDEEP 1572864:CFtWlQQMvChMs/cfrFR5YYawjyiLqYpWDEKU3Z9g5E:at+MMMsyr15m8vpcbUJ9GE
TLSH
T184D733C598B166E92C4710252DB7F4C83534B13FF51A2B1A90377ABD38AD2E58BF085B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Targets

- Target
  Injector.exe
- Size 31.7MB
- SHA256 7d6901e66b8ea1c1ec6ce63d4c00a243b28d5eee575f30e60d51096f6e3910b8
- MD5 515593f12761e3111faeb8eda64aa80a
- SHA1 db8232ee57655ad3129a211057cbe4027eafa6c4
- SHA512 1757988548d952a8df77eec2a8bdc237191375c8fd40c6b566ef8bb19836e5f2a942a012d61bba49daef17a05a05c849159b670df2eaf9e44da309f990409e97
- SSDEEP 393216:LOUX5FVbZY7JO24n5v11r9/W75qRFwAZ/2eSHaizJAWiA3eKyadbD0HdC21:Lr5nuJOFh11YOq4LSHaWJG0yadeC21
- TLSH
  T17C7723E766E5B2D4D7C24984638D61DE12C2A4BBC9EE943D3AC71C036534CEB8588DB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral1 behavioral2
- Target
  Zynova.exe
- Size 34.6MB
- SHA256 2f6a9e8fbe60add2ce15b42a806397c1826769f9d820f96a5d22157d6cee3666
- MD5 19f974f7f6d4728d2434a9f78ce10dbc
- SHA1 f0bc05a0982b4db85625d5ff693ff5e5429e4406
- SHA512 87c7f19968f4311b3eb21cc54dd625bff8bad1ff1845e5f095d4cf84d52f7561aa18438416265cdffffb7fe073d75c3eeb1880aa35cb58237079eed533fdab1c
- SSDEEP 786432:hi6/2MY1az2rQPdSddIHcNvVJaQWpo9IuNfnAbgWmnk77D+Z:uMYcz2c12KHsvmQv1nDzO7
- TLSH
  T18E87238758D463D4C7C34504628F43DB21D1AD7A86FA88192EC73C036A25EEB568DFBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral3 behavioral4
- Target
  ZynovaModule.dll
- Size 3.2MB
- SHA256 3550d9c2360d0278173d4e69dd38a04376d566e51307221ab91a04669f5f9b03
- MD5 9253386f4271e97315de2054a08f42fb
- SHA1 59c4bb83f96c0e6941718af75dfab22465b110cf
- SHA512 9e058a2232eb55dc1e1f6124313dbb9c62546bc4851f82b35d634bb78227a3991cf461411e6e16ff19a57544a82b596d86b342cf2b9a0952d01b0ab3d56185fa
- SSDEEP 49152:jIQcD0gwi8jM1qIQQ7V+PJVHIvKS8bp4jGFb5KXI+qs977Fsg5ghAobxJ8LwOF:j9rPcpgHzbgYQJoxJ8Lv
- TLSH
  T10DF59E76A6A800ECD077C1BCCA979A17F7B2B4490320A7DF16E446651F67BE04B7E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

1

T1622

Credential Access

Discovery

Debugger Evasion

1

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6