General
- Target SimpleZapretGUI-Setup-1.0.0.exe
- Size 25.0MB
- Sample261027-1qkn3aee72
- SHA256 54fefdfef27f1d0d4c98960281f4959ce5b16e9655a5bbf460f971c37325b95c
- MD5 9564c140e2f3e9a588cc5214a74f7797
- SHA1 46785e424e4da37c1754e26664645cd2273bfba2
- SHA512 7c0ed72931a6afbbe99bfa48318ec75e82f36dc5c2a1bec41401372de67be5ac7d70d1217e99b89cf661ac0c876fdea8c4c265cab11c6070cb25e86f2ecca651
- SSDEEP 786432:I+EtdmAKsYlE4yuCX8lfSo0QrnAUKXkKuEsu:yzdPz+qTsn3ZEx
- TLSH T1AB47333BB15B753EE06E1A3639B29214943B2B2079268C16E5F4CC5CCF291721E3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SimpleZapretGUI-Setup-1.0.0.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
SimpleZapretGUI-Setup-1.0.0.exe
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target SimpleZapretGUI-Setup-1.0.0.exe
- Size 25.0MB
- SHA256 54fefdfef27f1d0d4c98960281f4959ce5b16e9655a5bbf460f971c37325b95c
- MD5 9564c140e2f3e9a588cc5214a74f7797
- SHA1 46785e424e4da37c1754e26664645cd2273bfba2
- SHA512 7c0ed72931a6afbbe99bfa48318ec75e82f36dc5c2a1bec41401372de67be5ac7d70d1217e99b89cf661ac0c876fdea8c4c265cab11c6070cb25e86f2ecca651
- SSDEEP 786432:I+EtdmAKsYlE4yuCX8lfSo0QrnAUKXkKuEsu:yzdPz+qTsn3ZEx
- TLSH T1AB47333BB15B753EE06E1A3639B29214943B2B2079268C16E5F4CC5CCF291721E3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.