General
- Target Tzi_Microsoft_Tool.exe
- Size 10.1MB
- Sample261024-2pjk2ssw2m
- SHA256 60301e1e5c1973bd96f5c812564f228a8f14d10776cabee7ac0877f629523261
- MD5 07b9f4930fed9268e261b16ad2ea812f
- SHA1 903f2c8b234d2e3c8d10fb9dc94ee43628080e6b
- SHA512 f426b8038a9086ffbe65fd1bc4c9989d65ddbcb871de84ef303e20467ec371e4f5ea0f27e9782a64c5e5489536fe1ab27f634a2f61e020e3654326fba96c3c36
- SSDEEP 196608:6agfF/ER8oC9pxmJm2gKUoIDm5x879fiweBeH+h4Hwk4IqkwXfak:6akYmqTHqm5xNwxehSwk4IOl
- TLSH T1B3B6128AF9A00AD5F20164B6A4B748A7D1D07083CFAE55EF68049746BD2F5E8CDF3538
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Tzi_Microsoft_Tool.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tzi_Microsoft_Tool.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Tzi_Microsoft_Tool.exe
- Size 10.1MB
- SHA256 60301e1e5c1973bd96f5c812564f228a8f14d10776cabee7ac0877f629523261
- MD5 07b9f4930fed9268e261b16ad2ea812f
- SHA1 903f2c8b234d2e3c8d10fb9dc94ee43628080e6b
- SHA512 f426b8038a9086ffbe65fd1bc4c9989d65ddbcb871de84ef303e20467ec371e4f5ea0f27e9782a64c5e5489536fe1ab27f634a2f61e020e3654326fba96c3c36
- SSDEEP 196608:6agfF/ER8oC9pxmJm2gKUoIDm5x879fiweBeH+h4Hwk4IqkwXfak:6akYmqTHqm5xNwxehSwk4IOl
- TLSH T1B3B6128AF9A00AD5F20164B6A4B748A7D1D07083CFAE55EF68049746BD2F5E8CDF3538
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger