Overview

overview

8

Static

static

1

ZapretUI.vbs

windows10-2004-x64

8

ZapretUI.vbs

windows11-ltsc_2024-x64

8

ZapretUI/Z...re.ps1

windows10-2004-x64

3

ZapretUI/Z...re.ps1

windows11-ltsc_2024-x64

3

ZapretUI/Z...er.ps1

windows10-2004-x64

3

ZapretUI/Z...er.ps1

windows11-ltsc_2024-x64

3

ZapretUI/Z...er.ps1

windows10-2004-x64

3

ZapretUI/Z...er.ps1

windows11-ltsc_2024-x64

3

ZapretUI/Z...er.ps1

windows10-2004-x64

3

ZapretUI/Z...er.ps1

windows11-ltsc_2024-x64

3

ZapretUI/ZapretUI.ps1

windows10-2004-x64

3

ZapretUI/ZapretUI.ps1

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    ZapretUI-1.1.0.7z
  • Size 123KB
  • Sample261027-q52wsaev2n
  • SHA256 022dec8cbdd34be3a4c2ab4d62d2a1ebf037595d5c4756459f0c4a89dcd42ae6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
execution

Malware Config

Targets

    • Target
      ZapretUI.vbs
    • Size 3KB
    • SHA256 82b94f7fb679b62001563b3096e77601853a222d965942b4df7dad7b7d7ac83c
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral1behavioral2
    • Target
      ZapretUI/ZapretUI.Core.psm1
    • Size 100KB
    • SHA256 67988fd221f47a8cc82897d3d9f501dba4d0b27715dda454c61f2fd1b7e8f0d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      ZapretUI/ZapretUI.DiagnosticsWorker.ps1
    • Size 16KB
    • SHA256 48fb7dbde59dcba7b7e57eac941805ede87d0675adf620a02ace088b77e0bc58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      ZapretUI/ZapretUI.Launcher.ps1
    • Size 2KB
    • SHA256 aa13fc34481cfaee4646c52d7b2cb48f85a400a03ca27b0b18efb7966846c1ba
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      ZapretUI/ZapretUI.Updater.ps1
    • Size 43KB
    • SHA256 65210b0c23c4ba21528fc57420cbd95f9abbde0f0562c4317304450692adbacd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      ZapretUI/ZapretUI.ps1
    • Size 139KB
    • SHA256 a84cdeccd97f012d71f5bc817b705b9edc46f4cfb3643a8700741ddf195a342b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks