Analysis
- max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 22:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZapretWrapper.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZapretWrapper.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target ZapretWrapper.exe
- Size 454KB
- Sample261027-2r7qnaxtcs
- SHA256 9afba53b1e82a47ecf3a49b81559c5a4d4a4e2a105b74c988b39365352cf7bbe
- MD5 09a552b4a4d3ac3dd7e65169a9a244f3
- SHA1 b0b037c4a21ba013796995f2561c98a7302e0487
- SHA512 a87d88146ba25279e6a0d92f5d8423825f455df87ce4b0dd8a344748b95ea1632b49fb736373f78473f516a35fcc2fe1ce4ea7c0b07451422e5358ac473f9f85
- SSDEEP 6144:VvdHkNFdaxmMEEJpATTiiKejWNlKbZ1DU4rOtH5e4PsuhigzmzlDNfTciiYejW5I:Vvd4daxmgWnjWg71lBzlDNk5jWU7v
- TLSH T146A4BE1673B841B9D2BB8639C8A144C5A732750B5791EBCF1B4A6CFD0EA23919F32353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1376 ZapretWrapper.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 1376 ZapretWrapper.exe 1376 ZapretWrapper.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 1376 ZapretWrapper.exe 1376 ZapretWrapper.exe