Overview
overview
4Static
static
3zapret2-di...rt.dll
windows10-2004-x64
1zapret2-di...rt.dll
windows11-ltsc_2024-x64
1zapret2-di...64.sys
windows10-2004-x64
3zapret2-di...n1.dll
windows10-2004-x64
1zapret2-di...n1.dll
windows11-ltsc_2024-x64
1zapret2-di...s2.exe
windows10-2004-x64
1zapret2-di...s2.exe
windows11-ltsc_2024-x64
1zapret2-di...T).bat
windows10-2004-x64
4zapret2-di...T).bat
windows11-ltsc_2024-x64
4zapret2-di...0).bat
windows10-2004-x64
4zapret2-di...0).bat
windows11-ltsc_2024-x64
4zapret2-di...1).bat
windows10-2004-x64
4zapret2-di...1).bat
windows11-ltsc_2024-x64
4zapret2-di...2).bat
windows10-2004-x64
4zapret2-di...2).bat
windows11-ltsc_2024-x64
4zapret2-di...3).bat
windows10-2004-x64
4zapret2-di...3).bat
windows11-ltsc_2024-x64
4zapret2-di...4).bat
windows10-2004-x64
4zapret2-di...4).bat
windows11-ltsc_2024-x64
4zapret2-di...2).bat
windows10-2004-x64
4zapret2-di...2).bat
windows11-ltsc_2024-x64
4zapret2-di...3).bat
windows10-2004-x64
4zapret2-di...3).bat
windows11-ltsc_2024-x64
4zapret2-di...4).bat
windows10-2004-x64
4zapret2-di...4).bat
windows11-ltsc_2024-x64
4zapret2-di...5).bat
windows10-2004-x64
4zapret2-di...5).bat
windows11-ltsc_2024-x64
4zapret2-di...6).bat
windows10-2004-x64
4zapret2-di...6).bat
windows11-ltsc_2024-x64
4zapret2-di...7).bat
windows10-2004-x64
4zapret2-di...7).bat
windows11-ltsc_2024-x64
4zapret2-di...8).bat
windows10-2004-x64
4Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 17:50
Static task
static1
Behavioral task
behavioral1
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/bin/WinDivert.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/bin/WinDivert.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/bin/WinDivert64.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/bin/cygwin1.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/bin/cygwin1.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral6
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/bin/winws2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/bin/winws2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral8
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT10).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT10).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral12
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT11).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT11).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral14
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT12).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT12).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT13).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT13).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT14).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT14).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT2).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT2).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT3).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT3).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT4).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT4).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT5).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT5).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT6).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT6).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT7).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT7).bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
zapret2-discord-youtube-vrchat-1.10.4r4/general (ALT8).bat
Resource
win10v2004-20260911-en
windows10-2004-x64
General
- Target zapret2-discord-youtube-vrchat-1.10.4r4/bin/winws2.exe
- Size 641KB
- Sample261027-wevmnsfy2l
- SHA256 ba4ceccdea3576da0a0991a50d7893ea911de197281338132dbec02a5b2fcf58
- MD5 9d6589930197aa1609fe428b689af75e
- SHA1 b7d9fff2d7928d7eff87de037eabc8ba1c3f798c
- SHA512 7ef04d622c4b6c9b67f334308b11d998136b1f8fa7694b0bd72020497ead5d047f6372c5f4f009eb4e70646a12fb68af303a45364b27d2d74d4a0aebcba9090a
- SSDEEP 12288:/dre9GRrrDYC1rhFV48ZzpJhZPRWwUOLIVpBlF1ZM6:JbkC1rhP48xpJ7RTJcVr
- TLSH T11CD47C06E2A248BAC46291718B9ED732B731FC491324AB1E3B64F71C1F35D605A9F76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 756 winws2.exe Token: SeBackupPrivilege 756 winws2.exe Token: SeDebugPrivilege 756 winws2.exe