5087c70b35a41a231b46a411a66da53803b4554de67b2e77419fb2b5e62fe4be

Sharing

Copy URL Twitter E-mail

General

Target
ZapretGUI_onedir_.zip
Size 19.3MB
Sample261027-2sc8fagv8x
SHA256 5087c70b35a41a231b46a411a66da53803b4554de67b2e77419fb2b5e62fe4be
MD5 fa7a5e8165f5c2aa0acf3d4ab473e565
SHA1 b2e7d3549c040909b857d6043b209c5a3f9fd128
SHA512 2f867a0da492adaf0dfbd6a3fe7a8d687cf141edea352b027089038dbdb89b9fc12ffd54385642de4bec6f5f5d0984abebfeec0828d288add9b0da69e87811fc
SSDEEP 393216:ysSndfg0/4jelqHB26GQg1DFoeuRdHNaphFo5Rc6YvExotjsXBO+i6TlXFHzMALZ:3SndF4eqHBt9g1DRYdtcFoXc64LdsXBp
TLSH
T1F4173333DADB3800C47FB034616A470761452EE58BD25BCE3AA1C748396B654BB2BB7D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery pyinstaller

Malware Config

Targets

- Target
  ZapretGUI/ZapretGUI.exe
- Size 3.5MB
- SHA256 fd641177d6b4024cb2a4546fd18027c385ec63a6021a28fc687fdb5e657357ac
- MD5 97d5564c6243684b810975897fe1c6d3
- SHA1 cd46a702056de04a3ecc50b4bddb7996e9709551
- SHA512 5be7704d5d82f4bd0b07cd8e8092eda3229f0b53c0823aa1c6c9777ad79ef30058c2fe1f8df33d7bace98d43fa4c9d6f9a8712b15c392ceaa932c77c1c45d1c0
- SSDEEP 49152:VHx4cbthsp8L8mrp9H3eHmlfzr4UVjnZ+DHIAVIYhr5oYurMEzj2N8:Pbsp/mrpd3HlfzrFjZ+bMYnGdzj
- TLSH
  T1D4063358A39019F6F9F7423E89A78144E77238A55370C6DF03B09B3A7F231E12A39795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  ZapretGUI/_internal/PIL/_avif.cp312-win_amd64.pyd
- Size 7.5MB
- SHA256 38b5ca8582752f4f25b4a68dede6653573c37697d9c8100a82e52ecde282e573
- MD5 9f3d6e23cfef64db85e09b4829554709
- SHA1 1f7ba3ba02cc3a2e77280a5014c90f942d922b24
- SHA512 bfa1d8a1c7738b573f5eeac7e31fd45cd6496d347facc65721d8ca52dab2bbf805487a98289bd366f039b12427849a1736fb9f85344ca03c05d7c47d66be7572
- SSDEEP 196608:XooXLaO0h3DoACxDJbsg4pG7I/8JepmqRu5DgMG+IovZG+sWmUnlrebGGqjIrkRz:NXLaO0hUAgJbsg4pG7I/8JepmQu5DgMz
- TLSH
  T1E286D08AF19391E8E13384B4857BA716FA24302E9759527B33E5C5297F937E04B2EF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  ZapretGUI/_internal/PIL/_imaging.cp312-win_amd64.pyd
- Size 2.5MB
- SHA256 6dfd10a98bc81a1999e2b5ddb8be8c1cfb9a2c8e10258c56a52ee0d8930d3d7f
- MD5 5f6bd2ca9554530a9afbd7b951d9a46a
- SHA1 82df5cff020d9358a2b74a95903f7941fce186b7
- SHA512 60ebe1490d694b6694eb063c01b2c8c39cfc463d8d7fa31d3301b31a19c262fb7c7e183e34872acb70fea120d0e40240ef0c582746665e24e455c0cad23b7167
- SSDEEP 49152:9eeKsl4kkdQC4LLEOGe5v03Fav5UupMHxnNdtLR:GxkGLFavdk/J
- TLSH
  T1D8C56B06E9D19599C6B28034CDA6C216E3B1B80D17F187F77684A7F93E23BD0353A396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  ZapretGUI/_internal/PIL/_imagingcms.cp312-win_amd64.pyd
- Size 263KB
- SHA256 46c59cf197b74954dfa01036d97938291573fa9ec339cd34f90fc7c870001cac
- MD5 dd19114dc2389034740bc9b2bca4554f
- SHA1 e3f24041182cdd352aaacf5f17b289d415413693
- SHA512 59f5de18eaadae09f6d6c7fd640597c11182580a30ec8777454bcac7fbcf9dc60dfeaabc9045be92f0fd5a519c2a285a0412cc9d2b793ce333e089b63419db67
- SSDEEP 6144:FfjmnxF+k7gq3oORI7OBhjbmLg9uP1+74/LgHmPr9qvZqhLaHLTLrLfqeqwLZ1id:FrmnxtfhjbmLg9uP1+74/LgHmPr9qvZq
- TLSH
  T1DB443856A2981CF9E477E13AD193A50BD7F138160321D6EF42A08E6E1F17BE4693F342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  ZapretGUI/_internal/PIL/_imagingft.cp312-win_amd64.pyd
- Size 2.1MB
- SHA256 fe615fedf586c7206a74bedecddbf58623ffdf57e90ca2f8bca062aebae138c0
- MD5 10d3a37597d38b0a7579ca5ff23ac666
- SHA1 41bd76e2bbd68cd5ac39a8bca5410b4bd950cc91
- SHA512 3ab43fbf9b8cf8fc80a33cb1a75f2150a24382e5e376c4ba2bbfeaf3e05d10967425416e4880ac2ea01c02b36d902e1f8058b1d9aa75b15619941e76e4a37385
- SSDEEP 49152:2hV5V/cPlYEz8PYJ19FbVUgKwhrGDflVCZaxSR4YetiK:2hSCEbetJ
- TLSH
  T167A5BF46E29611A8C97FC174C657961BE3B174010304ABEB65E48B99BF23FF12BBE314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  ZapretGUI/_internal/PIL/_imagingmath.cp312-win_amd64.pyd
- Size 25KB
- SHA256 e1b3e6bc361fd8735df2c920c9878238dabaf797fbc13041ffaa26f635888d3a
- MD5 b3de42ca20ecf02b340baad465a5a204
- SHA1 e9e8be4b6db7f6da71b221778fc5b9a74d349cb4
- SHA512 76549510d0779a0c85f0b27842c8a80b3b8c401859a9b067d9031ef39e51207cffa1dc57e2a5f29783d5355130f959f236c333a0efd85ef228fe3c38ed5f07d8
- SSDEEP 192:om6wv82mOmBtlkL8nxDw7mE5su1jolg8dxS0g5oyRaxC4tx12bKIDpgeAQJQFx+2:l82s7xE7Wut9dRaxRfIDHAQJGjK7
- TLSH
  T18CB2099E5F8024A6C92B463F88621E654561786323D15FDF82E2F2893B93FC3163EF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ZapretGUI/_internal/PIL/_imagingtk.cp312-win_amd64.pyd
- Size 14KB
- SHA256 b7de0c367e22ada46a61a156023cc0d30187b45946f4154e077d630f161e2f0e
- MD5 e7809814441bc8862c27c78ec16ed9c6
- SHA1 a9df497f2102fdc9e6b7e0766b1d87ebaa894652
- SHA512 bec7901ee16c14cb0ef1723e267eec560d2b51a920cc30dbf4e83724234a24061411cacfe74fb5402d8ba01b4b0a08d02dbdedab00faf7e8f7f9f13b98c66f9d
- SSDEEP 192:7JLSVtg1YYMtcoxwtXc1v9Bfm16a79T4XgTA5:FLycMuOwZa09TzA
- TLSH
  T150623A19FB644CF3E4644175C4772E6AD272F6345772A3CF4370820A1EB2BD26E26E49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ZapretGUI/_internal/PIL/_webp.cp312-win_amd64.pyd
- Size 400KB
- SHA256 6af926fd1a58f3912b6f5e290ef37768c26017988bdd2217c0daa8e1107d4f71
- MD5 7af4f7efd8115413adf08038026872ee
- SHA1 510b60f844252724150dc2121c3897e54e0ceddf
- SHA512 5202c188cdaa14c057d57f84d7ac9b8c7292f50c69442febdf5c8667758b424a84ec23fc7e27810fa611693cee228617182a40223026d7cee96f5e1738431843
- SSDEEP 6144:O6qMXbksderq2//fM4bWEFVbrjBEtIHm2oqtpegc6X3fHAj3dcLei:O6JPc/fMgnFEt72Te36X7a
- TLSH
  T1A7945A46E9A225E8C5ABD078CAEE515AF6A53C1C035096EB47E4FE253E33FD0563B301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  ZapretGUI/_internal/VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH
  T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  ZapretGUI/_internal/VCRUNTIME140_1.dll
- Size 48KB
- SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
- MD5 c0c0b4c611561f94798b62eb43097722
- SHA1 523f515eed3af6d50e57a3eaeb906f4ccc1865fe
- SHA512 35db454dbcc7ed89842c0440b92ce0b0b0db41dbd5432a36a0b7e1eddf51704b1f0d6cff5e3a3b0c3ff5db3d8632fed000471180ad72e39d8dbe68a757ccdfb0
- SSDEEP 768:vzzO6ujT3MbR3v0Cz6Sz5q83ywug1HDV9zxfYbK9z:mq/oMx3hXHDnzxfYiz
- TLSH
  T1AE236BA453784486D4AB99B0C0DAEE577D7CFA964B10928F0BA0D15C1F637D0EB3D21B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  ZapretGUI/_internal/_asyncio.pyd
- Size 72KB
- SHA256 c77de90cad749087a0c5dc5e19d78d24f6ef44e7e5ac19b8420cfc0cea62395d
- MD5 0ad3abc085f1d954eff9dfa83039ebb7
- SHA1 edb66b8223c3897a72b171f221934a4fee9dc24e
- SHA512 76bbe6a89a11a946e4901a8321c3b9f02cbd6a36dfb42dfdf5be00ae78cf5b699d74bd2f1af0c6f0b0c12fc91d1f400e5eb80ed7792f4bea8c6aee212d368d15
- SSDEEP 1536:cFOnRUrojeb8eUAN8bvobyjBIWOnsytH/9qUfIZR6/:cserQege3N8bvFBIWOn8Zw
- TLSH
  T1F6738DC6A2A4418BDD93B274C5636F93FBB0F6421501475F61A8C28E2F6379183FE726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  ZapretGUI/_internal/_bz2.pyd
- Size 84KB
- SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
- MD5 2be172c3086efe56c7e1d3279142295a
- SHA1 910e0d7ec11d1efda15d03ef826423834aa59fe3
- SHA512 37f84d9e6d766d8a97ccf0bd3c1a2a07f528cf45290762ef1f45e603cb513f43befec046693cf2e029366cca1682cd2753e54c53431773aba63c840bafcbf369
- SSDEEP 1536:5Qioz7CmAZG1OwJYrmbdmmv0KV06G68u+SSnrO+pIWCVeytH/9vfIZRE2:dozW2vJYanvEd3rlpIWCVWZb
- TLSH
  T184839E82F36857F6F49B91B986810797F770BA55071093BFF288C2992F03B816E5C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  ZapretGUI/_internal/_ctypes.pyd
- Size 124KB
- SHA256 0e56107a891100535f2da79d85a5ae65ff1227b4765bd108f8593ac1a1110d81
- MD5 9314ab9707985aaf6e234b5c1fc3c3c6
- SHA1 e8ba1f40f800397e3e6a7f95ffe2b9f63bf812ed
- SHA512 a8436ccbc32dd31694d3a66072fa76933a2ecf0ef5eaa0b79380e6c53c8e8bd0bfaf7fe9341c17ced215792f3990f4ef220049da92dd4991ebc1d83ef3d41484
- SSDEEP 3072:SxVJxKqXCjbqPzMM+kffELENy/Zq4e4lIWLPhG:UHxKsCbqbffELCya4c
- TLSH
  T197C35B0B739410A6EBA35178C5B36F07E7B1B42B171183CF02A4C6992F637A36E6E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  ZapretGUI/_internal/_decimal.pyd
- Size 255KB
- SHA256 aeacfead2befcc0768063a037bb64bd32109ae09cb144e5f571b04dd7965db9d
- MD5 240a03069d6968741b703d026337ad2c
- SHA1 42e6298c697e48d062db8835bafb976ef76b1f73
- SHA512 60b99cd5f1c66514fcd674f3400dabe84f4cff55a0d5ff5959879d226f3dbe85d325630a4a5583e54e8af313216fb3288d9a466d285973078675677dd6470117
- SSDEEP 6144:MsO6Ms4BvOcJ3TXFIZK1qGh9qWM53pLW1A8A/ctJuHI:4BvOcJ3BIZ/Gk6A/kJuH
- TLSH
  T105446B56A2490DA4EE738074889BDA57FBB278960320D78F43B48A973F577A3137D348
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  ZapretGUI/_internal/_elementtree.pyd
- Size 131KB
- SHA256 5009a9a53c03ef8387443b5cf6ce08e5c3a79727466a0b931c5bbca915bf89ca
- MD5 b8925406de227ff5f760c323e49e3cb1
- SHA1 395abc282aefc680f5a3c92691f4642d28b553ae
- SHA512 4dacfeeffd49b9f86bba3cff983654c3cdff517c9b983f953b04bc22fa8321c4320d71f5d2a02514b00fb8259c3b6d2feb808a2c6c390cbbb90ab4a787f40873
- SSDEEP 3072:3P2SFTopYF4V+al5l0MLa6mFFfAN23Lzpnq5IW6fbHxx:3NFTopQZal5l09nuqLzpnqGT
- TLSH
  T15BD35B5B7261C46BE1A24079D2A78F46DBF6F9A20E0083CF2294F25D9F733813E69715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  ZapretGUI/_internal/_hashlib.pyd
- Size 67KB
- SHA256 03d233dbace599168eaffec823de6ed7beec8c2a4ebfe9b8a3d8e042a59af3ba
- MD5 72b2f8cdf8d6b1dbbdd4e0c0bacf849e
- SHA1 54d10c68abecefa52f866bd13779544616c6b286
- SHA512 827bd7f6aaad7184b3bce810d027055e15818208c8b167ef467bfb21d83103ff24f6d90fe0a500297a93d66d5cddd41eb1cb632f124171b042506a417d5eb15c
- SSDEEP 1536:gksa/wmb96DB9qWptC8SBIWOIuytH/9SfIW44z4r:gHH9qWptClBIWOIBW4IQ
- TLSH
  T1B3639E0AB6944194D9A78175C9A39F53F9F1F28217206BEF4268C0CD2F233C3A77A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32