Overview
overview
4Static
static
3ZAGASetup_...08.exe
windows10-2004-x64
4ZAGASetup_...08.exe
windows11-ltsc_2024-x64
4$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/nsDui.dll
windows10-2004-x64
3$PLUGINSDIR/nsDui.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows11-ltsc_2024-x64
3BSX.7z
windows10-2004-x64
1BSX.7z
windows11-ltsc_2024-x64
1app.ico
windows10-2004-x64
3app.ico
windows11-ltsc_2024-x64
3cef/chrome...nt.pak
windows10-2004-x64
3cef/chrome...nt.pak
windows11-ltsc_2024-x64
3cef/chrome...nt.pak
windows10-2004-x64
3cef/chrome...nt.pak
windows11-ltsc_2024-x64
3cef/icudtl.dat
windows10-2004-x64
3cef/icudtl.dat
windows11-ltsc_2024-x64
3cef/locales/am.pak
windows10-2004-x64
3cef/locales/am.pak
windows11-ltsc_2024-x64
3cef/locales/ar.pak
windows10-2004-x64
3cef/locales/ar.pak
windows11-ltsc_2024-x64
3cef/locales/bg.pak
windows10-2004-x64
3cef/locales/bg.pak
windows11-ltsc_2024-x64
3cef/locales/bn.pak
windows10-2004-x64
3cef/locales/bn.pak
windows11-ltsc_2024-x64
3cef/locales/ca.pak
windows10-2004-x64
3cef/locales/ca.pak
windows11-ltsc_2024-x64
3General
- Target ZAGASetup_10.40.0.6308.exe
- Size 157.8MB
- Sample261024-v12gnsbs8s
- SHA256 0c10c01fa077ce51e674c52e40a0658ccfbe8e00fb39596fbae2b928110deb53
- MD5 5450926f110762ddc704bae1c46dc137
- SHA1 73d39e204033e9c49e94ee093ff140f2c3491cbc
- SHA512 2bacc28e76b23011d5685681f2698a4fcb053e270f37dde777931c27871bba2746f93a2d50ed30cf05d99d56619c1658cb296d4fc42f561c96c10eb89c7557af
- SSDEEP 3145728:+EjGZ328Y8lgjhZfkHg338LrxU5CpkvyXjzgKyUq+O/i9I/zq607zmj2eD+9s7AB:tqZ3xhY8HS38zpbXwKbqhK9I/zqn9Qo
- TLSH T1098833C40F09C274D1A165B19F224170AB6E99F58FFBD04185F2BE9DD137BED21D2A28
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ZAGASetup_10.40.0.6308.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
ZAGASetup_10.40.0.6308.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BgWorker.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDui.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDui.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
BSX.7z
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
BSX.7z
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
app.ico
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
app.ico
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
cef/chrome_100_percent.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
cef/chrome_100_percent.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
cef/chrome_200_percent.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
cef/chrome_200_percent.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
cef/icudtl.dat
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
cef/icudtl.dat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
cef/locales/am.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
cef/locales/am.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
cef/locales/ar.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
cef/locales/ar.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
cef/locales/bg.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
cef/locales/bg.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
cef/locales/bn.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
cef/locales/bn.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
cef/locales/ca.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
cef/locales/ca.pak
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target ZAGASetup_10.40.0.6308.exe
- Size 157.8MB
- SHA256 0c10c01fa077ce51e674c52e40a0658ccfbe8e00fb39596fbae2b928110deb53
- MD5 5450926f110762ddc704bae1c46dc137
- SHA1 73d39e204033e9c49e94ee093ff140f2c3491cbc
- SHA512 2bacc28e76b23011d5685681f2698a4fcb053e270f37dde777931c27871bba2746f93a2d50ed30cf05d99d56619c1658cb296d4fc42f561c96c10eb89c7557af
- SSDEEP 3145728:+EjGZ328Y8lgjhZfkHg338LrxU5CpkvyXjzgKyUq+O/i9I/zq607zmj2eD+9s7AB:tqZ3xhY8HS38zpbXwKbqhK9I/zqn9Qo
- TLSH T1098833C40F09C274D1A165B19F224170AB6E99F58FFBD04185F2BE9DD137BED21D2A28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/BgWorker.dll
- Size 12KB
- SHA256 a9e4f7ec65670d2ce375ffaf09b6d07f4cd531132ca002452287a4d540154a38
- MD5 36c81676ada53ceb99e06693108d8cce
- SHA1 d31fa4aebd584238b3edc4768dd5414494610889
- SHA512 1300de7b3e1ac9e706e0aad0b70e3e2a21db8c860e05b314a52e63dd66b5dffdf6be1e38ab6ede13bfd3a64631cc909486bf4b1403e7d821e3b566edc514c63c
- SSDEEP 192:W9Hsl/fIYiYF8LgaL2AMkKieowU+noPOJB3hy2sE9jBF0NyZKlH6JqEHma:LIYiVLpMNiuPxh8E9VF0NyZ6aJqEHN
- TLSH T1C1425C7709985C16DD1B6D3070C4963AAE36A6865AD082E3322FC1515B84381BBFE3BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
- MD5 959ea64598b9a3e494c00e8fa793be7e
- SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
- SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
- SSDEEP 192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe
- TLSH T1B3322A2657B0D2F2E6A1827408A639336BBA762412B50D1BDFF74481FC15BC67E39327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 2bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e
- MD5 f7b92b78f1a00a872c8a38f40afa7d65
- SHA1 872522498f69ad49270190c74cf3af28862057f2
- SHA512 3ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79
- SSDEEP 192:y1zQhZDqlJcKISw99ioU3MSfwLF/+nhHUisdz:ozoZDGKYw9goWyFGBU7z
- TLSH T1DB121B626688D5BBD2D1223636A92701DBF97328F0666C05D7B34E467DA42C67E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDui.dll
- Size 2.5MB
- SHA256 4851c92cb439ec4cdbfc2a9cb0ece07b73ff3d38a8531a912ed5a34247912288
- MD5 45b477ded611159eef024b8e13ff8cab
- SHA1 cb995c723423a792ded0905e178c8838a95fa6f3
- SHA512 9505b206ad70d2617cb101f6958ad4030143bfcd35e3a36607c4a570073e020621ea06cade63aaea0fa1f5618534015b89f9f4b5598fd3efd603b58b6f98f8fb
- SSDEEP 24576:S4eUnZDp9Lzk/Hwe9oNHFhnhEY5sPFAYiIqyz6yR36F5nLQM3JDfEXDQgI7U6yfK:pe/yMuYiILBenTJDfEXDJivu24Q
- TLSH T191C58B004F05D064D5E610B46EBA63759B3CE9359F7BC0D3A2E0BE68D235AE07D31B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis7z.dll
- Size 434KB
- SHA256 a896a9ece055d334d431cd0f856113ab925d9ee86d2dee383c0bfbbef11a5b50
- MD5 95f6f6ab9509bc366ab9215defe4251a
- SHA1 e3f4a6effd6ca5838cfe91a01967cb72edcc7b0b
- SHA512 a853f70d2ea7f384df99be067724bf3ca73c63f3c3573c112f5528fc86a96bd34509d934b038e2a81833f3abb3eedbc5894921291139100e01df6e35696c0ecc
- SSDEEP 6144:CUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckldrx:Cn5QEG39fPAkrE4yrBOXDfaNbckXrx
- TLSH T1B2949E22B6D1C435C56E02309918F77925AEB3B1192CDB1B739C5B6F7FB44C1AA28B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target BSX.7z
- Size 156.0MB
- SHA256 c50f765d723837b36af5da2fed86864dfaad5d64f473118599ee067255ec366e
- MD5 9ab85c1dc7d8cb62d8259e481795f876
- SHA1 73dcb3db279eb6777f596868f7ae69c06665f213
- SHA512 7588e87848e76fbf0fd5782674e657ed531b34bceeb7af3a4163f5828dac4f78239cc3b678b77d65276db2ea687185871a9c7aacb59b11fe1f27cc52728596f9
- SSDEEP 3145728:xjGZ328Y8lgjhZfkHg338LrxU5CpkvyXjzgKyUq+O/i9I/zq607zmj2eD+9s7AK:xqZ3xhY8HS38zpbXwKbqhK9I/zqn9Q5
- TLSH T1997833A14889D737F2325532DC10E2616F4AE6D06AF5784A09F6CBABED5371E31C7223
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target app.ico
- Size 363KB
- SHA256 346017fd33105251aeb2de111eb58ee0d2da3c23335a1832a67572518cf9de98
- MD5 33199406cbe6858b7ba6fc69a30d4214
- SHA1 b05871c21beca362941d4a75d8519ba9b810cc1e
- SHA512 8d0e13dc4a3f8448fe98914f5d81fab52646084fe51e3c870da059cc9d8d5c99d78cd13a82e8a91bdf02439a84954bc3d2849b123dbddf85fa52e4951b8bacf0
- SSDEEP 768:azSvcY3GLYhFohrttTiCft4iM0G6hhhhhhhhhhhhhhhhhhhhhhhhhhhhhh6hhhhk:a2UY31S9OiMJRTIDs9djY033333Q
- TLSH T1F4849D880F1DD1C4C1E965F55F620070DB7E89B6CFFFC05085B27E58D27AAEC28A1A68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/chrome_100_percent.pak
- Size 752KB
- SHA256 588128dbf03059cfa75a6ae5a86874c6463baed8ec300be83346cc70bb64a890
- MD5 887e25e660c5a3718f7ffcd0cf58db2a
- SHA1 bace30e8501929fb81f62ba606926932f969ed99
- SHA512 cd2aa2986bd4b497c6a8cf23fe4be9962364aa4b01976b123621e8baaa21cc0ed3ae4061aad1ece2f8171689c85879f320193494b7326c48dc019f7e5c2964fa
- SSDEEP 12288:EN8I3HWOnqsGgsz5B0GDJQrnKs8SNP+QSsBilajR2RovQj+0tiGHrVIpOWmYoO0U:G3t0zEEmPLB5jRiEG+0oGHJIRToO0TO1
- TLSH T160F412D3B370EC3EDFA752B7612611B5FC3705296F91854A028AE8396A63358E4DD2C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/chrome_200_percent.pak
- Size 1.3MB
- SHA256 e7f236686c41f690d7b2538e624a9384be5802ddbbfef06ef7b02366bdc71a4b
- MD5 e640a4de216cae3a0090c57fedb2b018
- SHA1 64f682134eb81cd040b96b7c0a1b26153843bd9f
- SHA512 a0ba0b3bdce99494b4e6e42b94bbe3620ddd85e8da37433bb1a9209f7e2a3f079a24e266f8b95b206782dc25fe36e140ea2de8bf621076814466a4f8ea912277
- SSDEEP 24576:k3DjZ3zkmmibkFR8+mZecSrx6eQQ4U3qCZ699wV/QtLHJI0baQ6edhOLoLJ:k3Dd3YmNbkFRJm8QdUaC1/QtJIkjrOy
- TLSH T13E5512C7D770CC39CAA30776616B16B1FC77003A1EA6848E0797AD353962358ACDA6C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/icudtl.dat
- Size 9.7MB
- SHA256 8dee674ccd2387c14f01b746779c104e383d57b36c2bdc8e419c470a3d5ffadc
- MD5 224ba45e00bbbb237b34f0facbb550bf
- SHA1 1b0f81da88149d9c610a8edf55f8f12a87ca67de
- SHA512 c04d271288dd2eff89d91e31829586706eba95ffbab0b75c2d202a4037e66a4e2205e8a37ecf15116302c51239b1826064ed4670a3346439470b260aba0ea784
- SSDEEP 196608:GEGwSv9AAQ48yTliXUxR0rHa93WhlU6tgYLu:G4KlQ4xliXUxR0rHa93WhlU6tgYC
- TLSH T130A63807A2FB4EC2F9FB6F30D9F452679567BD496E32805A11042F3B1C373A086617A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/locales/am.pak
- Size 482KB
- SHA256 87af674e60b464e814933ffab7302b67760c199c06429acc96cb69afe9739d9a
- MD5 9f7528bce977e3135c106f7a93d630cd
- SHA1 99a7c0ea383b9299b191ab7e6e8fc8e2e3f0c898
- SHA512 4af886ed2e5189818c17c9d2cb76c5e6a01871f2f51ddd668ea0a07aef23e6731801080a6f12f897ac28bc5537ea418448f6cbb04c4a2738ff1c24c37146021a
- SSDEEP 12288:vPTdUXuHWYBxo0gvNb5rv3uQQ/5x30jH8+r:3TdULYBxo0g1b5rvdQW
- TLSH T108B4CB547DF9F7170F8E8A19A4220E4E9594AD4692803C38D35AE3FC2B2DF1B4DDE219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/locales/ar.pak
- Size 514KB
- SHA256 7fb8bb1d0d9397f7a10d4f0f467d665b4c4f89f4da0f1490be86e7b3e062d756
- MD5 1ae1563e92e2adb58b4f2e99666ec8ff
- SHA1 2c2a6cefdd190032c2b1b791e1288899e108a55c
- SHA512 fb10541ed237637c12f9cfbebd0df787878168035963f1db3e42f3a23ada821f68d6c1b3a4ed581c40001aefaaa6465d5a7f1912027e430a44c709992c474f42
- SSDEEP 12288:6uUgFVsKESy5vXji67KcvIU71unHn59Nb5+72yIMgSENG/Vg:67cG8H5eg
- TLSH T138B49BE21B2984720B56DF0ED1E2366CE872BD23DB4BFC3124934A2156D7513E78E678
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/locales/bg.pak
- Size 551KB
- SHA256 a5c2549c0f8b085f99ef626f18277ff0e241da1ded5e2969155f5a74b7c9d69c
- MD5 1396b79332fcd23532322c90f5aa614e
- SHA1 602f7052993faf03357a5f976ef7ac69a618471b
- SHA512 ae291fb9d5c5bf54c54816cd7c4324f43320d77dacf4fe52dbe02e4f9c69fa8d509b29536113996b1eb274ce3af6edebfa3b2c87609cc328d754d5417e104d3e
- SSDEEP 12288:/0eCT9ZlYodAs1atU2LgzaVVcsQ9H5DH33KNAWEJiE7Jfu645zOJSZpfqG5+VTk7:/jkZlYodAs1atUXrs2Zz33Kazdu68zOw
- TLSH T1F6C422A15B9A68DF0501F45F98087E093CEB84FE3FE7879241642DBD39F10B486BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/locales/bn.pak
- Size 711KB
- SHA256 df731d23c78bac0cc8d547844d07ed0508d3d9aecc72ee8ee1db4646c14a5b64
- MD5 29894a78a61414e3059c71ee3e0bf1f5
- SHA1 b1ca054b047d287a4f1b5a4756ce80144f870fb0
- SHA512 bf66aa0c1b72ae1074d133c9d04765f86d5f09176d130ba75da30597d07f282fe50e248ecc8b9d6c88a9c33b47c54b37556a6c181798019a779c5b5bce004597
- SSDEEP 3072:ORRFDquwMeLkfkiaJhRkIBbtMh5103aFt:SHzcRJh1BbU5Xt
- TLSH T1B9F4EF209C6E91B6A8C5CDC9434C6370C523AE979B61F34DDC17A24938ADC7C8DADDB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target cef/locales/ca.pak
- Size 339KB
- SHA256 368ae12eb588b4da311652f4dc297e755ccce023a4061fcd8a4b675343cf008d
- MD5 bc95599e94fe9bc17d6c548fc06b2ff8
- SHA1 3e2a7df27846101f44c31b7ff642162d6d04866f
- SHA512 ba24be180b48a256c5f5d01e49d1f25e0bc5adf774e745bff6060d21b1c15a92cb2ec92929261e7e71c99aa9fafc3a2c5b376f64e357850af079da309a8aac1b
- SSDEEP 6144:0m/gU445rSk3wyq+5PAk4N3Mw2juwYMl/c3Is3czTE48QsKk3wZfcwM0nvLb9u1H:0mr9rSk3wyq+5PAk4N3Mw2juwYMl/c3r
- TLSH T17D741B239BC93B3744D2320ABB46C257F58CA9847B02D294F5AE0B1623CCADCD6776D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10