General
- Target Zapret-Control.zip
- Size 27KB
- Sample261027-2rvfbshs4k
- SHA256 3bed1881336fd8821e6334e3c8c4f42c5b951502e8909910aa927039a76cc486
- MD5 8236cb5096dd352400010bf98c10afe6
- SHA1 508f07dfc83db40193476f7cfd2612485734fa8f
- SHA512 2abffde6d1641d31f95f6f4d60991ce58e60eec297a7d468e7ca004c9857d070b394a8ad25fc7638f771bce128e82ea1f22a2894e64a135a2b71271d7e19258f
- SSDEEP 384:T5ptNQ6Iv8UcUoANO4zHtel9SqG31D8FYGSJOvlL4LHm+D68TeTkdxhAiCaKakKw:vtNQ6Iv+UFelHoJD6mZZ0arMjrg7hEGe
- TLSH T1C8D2E1BA90B3BB79E48F1A7ACD259EDAD72964B40D1C8D844F67C5AD40C10213FE4907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Zapret GUI.bat
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zapret GUI.bat
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ZapretGUI.ps1
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
ZapretGUI.ps1
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Zapret GUI.bat
- Size 179B
- SHA256 788879c5954138800f3b53206ee36d68a95e99c1d13f8353b66fc39a6a0bee8f
- MD5 41b7d6a275a20a665b6786352a423cee
- SHA1 0c0bfa4f0777d12c9052a1348bbd4c58325db72f
- SHA512 e147721607424b09d12451eac2eb5e58977a08e25ba6fddbf77f199517625a4714a122974a91fbe32275663c08dbe90394ea804a0972d1b7ff35aa34f72df790
- TLSH T102C012610D69933999634B69529A5260051D6685528082C538B1DA2D78492FAC74B2C4
- MD5 SHA1 SHA512 TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target ZapretGUI.ps1
- Size 118KB
- SHA256 fd2d19f6f416347be91103db1e8730075970add721a9cf6f4e4118983f867788
- MD5 57320ec7fb615cde6bb0fefb32265529
- SHA1 e2289567723b822e80bd1fde0c3d823968fbbf10
- SHA512 3221d9761b2e3330f8f11264fec1897a4363b6f71709ea3563c91c8b748cbfcb3da6dda85a5569e51ed46d2c9f62815523d8caf609d39d7d20a2a1490d9757d1
- SSDEEP 1536:T0aW9zeLDJphjGRpuvGe9uYGbAuQy7Q02YwS1Hu:TI9w1mre2k/mAYg
- TLSH T1B3C30811A5F949B44293812BD9907804BE1500FF03295714B3ED9BFEAFF292C46BFEA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.