General
- Target Zapret2GUI-Full.zip
- Size 18.3MB
- Sample261027-mxkqract4y
- SHA256 31cb48f05fde134cf4913cb403590b4875bcd9d4532d2a30958a35bf5437c54a
- MD5 2f70ba57dee03c1af4f9e49fa10cf25b
- SHA1 e3851325cbdf88bc90923c21226156739d2443f5
- SHA512 e6fe7e666012a8ee7f09b84681e14d1895c870ede5449ed42b9e77b1f81ba54f9368c8218e663e0d214651f6b28d28e99f946199addc5678898b3c6475eb629b
- SSDEEP 393216:dFtE9msH903oBp6qK0+3niqX67xmaQHRe/eG+J7qjnaiKilDp1+ooQc92+9sppxE:t6d903ouv3niVxURe/eG+J7AaiKi9pXM
- TLSH T1C417337DA0D141D3A18F292CD5EBA3B04A746E312799E65AA913E1113C43CFBD339F89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Zapret2GUI.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zapret2GUI.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Zapret2GUI.exe
- Size 18.5MB
- SHA256 6b5d671fe23341924269a17ffa06f1ced15338314935c5bf3191e36533539028
- MD5 ed48051bf1f6407c37ddbb3a49ddc3ef
- SHA1 4b96b230cfe9adab5f1978afadb39116d0192cbb
- SHA512 06384fc03298b86164262914c41a9e6afa3b6dd9cf472194fb344184e7484ce86132019adc1c72aac21ba162615821383233f3f67b592bc6aa56042bb36790ad
- SSDEEP 393216:czTBU7rQHt8vTcO+I/yr76hdZqHt8vTcinGCnGjei2bjRon7Yx4r0B8oENflQWHD:QY8t8vTcOfa7KZqt8vTcinGCnkei2nR7
- TLSH T188173368A0C105E3E5DB1E3C89E7D272CB75BE232761E4CF16A6D0212C079FB9539B85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.