Overview
overview
8Static
static
3Zapret/bin...rt.dll
windows10-2004-x64
1Zapret/bin...rt.dll
windows11-ltsc_2024-x64
1Zapret/bin...64.sys
windows10-2004-x64
3Zapret/bin...n1.dll
windows10-2004-x64
1Zapret/bin...n1.dll
windows11-ltsc_2024-x64
1Zapret/bin/winws.exe
windows10-2004-x64
1Zapret/bin/winws.exe
windows11-ltsc_2024-x64
1Zapret/gen...T).bat
windows10-2004-x64
8Zapret/gen...T).bat
windows11-ltsc_2024-x64
8Zapret/gen...0).bat
windows10-2004-x64
8Zapret/gen...0).bat
windows11-ltsc_2024-x64
8Zapret/gen...1).bat
windows10-2004-x64
8Zapret/gen...1).bat
windows11-ltsc_2024-x64
8Zapret/gen...2).bat
windows10-2004-x64
8Zapret/gen...2).bat
windows11-ltsc_2024-x64
8Zapret/gen...3).bat
windows10-2004-x64
8Zapret/gen...3).bat
windows11-ltsc_2024-x64
8Zapret/gen...4).bat
windows10-2004-x64
8Zapret/gen...4).bat
windows11-ltsc_2024-x64
8Zapret/gen...5).bat
windows10-2004-x64
8Zapret/gen...5).bat
windows11-ltsc_2024-x64
8Zapret/gen...6).bat
windows10-2004-x64
8Zapret/gen...6).bat
windows11-ltsc_2024-x64
8Zapret/gen...7).bat
windows10-2004-x64
8Zapret/gen...7).bat
windows11-ltsc_2024-x64
8Zapret/gen...8).bat
windows10-2004-x64
8Zapret/gen...8).bat
windows11-ltsc_2024-x64
8Zapret/gen...9).bat
windows10-2004-x64
8Zapret/gen...9).bat
windows11-ltsc_2024-x64
8Zapret/gen...T).bat
windows10-2004-x64
8Zapret/gen...T).bat
windows11-ltsc_2024-x64
8Zapret/gen...2).bat
windows10-2004-x64
8Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 00:59
Static task
static1
Behavioral task
behavioral1
Sample
Zapret/bin/WinDivert.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Zapret/bin/WinDivert.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Zapret/bin/WinDivert64.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Zapret/bin/cygwin1.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Zapret/bin/cygwin1.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral6
Sample
Zapret/bin/winws.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Zapret/bin/winws.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral8
Sample
Zapret/general (ALT).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Zapret/general (ALT).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
Zapret/general (ALT10).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Zapret/general (ALT10).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral12
Sample
Zapret/general (ALT11).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Zapret/general (ALT11).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral14
Sample
Zapret/general (ALT2).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Zapret/general (ALT2).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
Zapret/general (ALT3).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Zapret/general (ALT3).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
Zapret/general (ALT4).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Zapret/general (ALT4).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
Zapret/general (ALT5).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Zapret/general (ALT5).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
Zapret/general (ALT6).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Zapret/general (ALT6).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
Zapret/general (ALT7).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Zapret/general (ALT7).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
Zapret/general (ALT8).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Zapret/general (ALT8).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
Zapret/general (ALT9).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Zapret/general (ALT9).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
Zapret/general (FAKE TLS AUTO ALT).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Zapret/general (FAKE TLS AUTO ALT).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
Zapret/general (FAKE TLS AUTO ALT2).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
General
- Target Zapret/bin/winws.exe
- Size 199KB
- Sample261027-bb35esxv5p
- SHA256 31d68a175abebab19f7f39bf6d0845ec5c18ab653eeeea6ee830b22d799b7e55
- MD5 f94c4b0110feccd6aeca48c93b278d8b
- SHA1 0148ac55f074a602d37db9031a8f33912ad427d6
- SHA512 cc45b7029bbff2cad44faec5f3f4a96a23365007101be9795b2dc7ad1c0184402160ac13deb97ddb01547be7803d35cdd79d5ec59a750ac33ec2234e076d280a
- SSDEEP 3072:u6iE1/fe+JgV/uCUsnD23WDTCT4+4Q1aRw0SKcVsa4jNKcdJbIk6D79th2y/lJ:r7JgrUsdDTQFDVsf5KQxIk6ltz/lJ
- TLSH T184146C17F3D688F9C462C17897AB6333E931FC452124EA4F6F94DB252F61E10A12E798
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 2736 winws.exe Token: SeBackupPrivilege 2736 winws.exe Token: SeDebugPrivilege 2736 winws.exe