General
- Target Zapret2-GUI-v0.5.1-portable.exe
- Size 2.4MB
- Sample261029-yle7nssxcz
- SHA256 8f57d1a9f46c746cbda0e98d26d367d8bc117d1422b91b900cbfbdf3d2b81078
- MD5 a555770bf8bd408f5a1ba661e3f0e016
- SHA1 f6dcc0e2eb9705fc99067c68ec3008a250ab0e1a
- SHA512 84cbe8bc08adda1ba004be83ff159d0507294a1b6ca34cf453a5f1434bfc7cecd457528c12d53be8c42dda7a4dd96de528586e7a1ada43db4f0a6b4c9a66059a
- SSDEEP 49152:uSkMtuTQ5NorTHGxnUta5bvLokMbHKl1asOOs:uzMtuUHUS1zdDokMjKoj
- TLSH T191C5BE1233FD865AF1F76B75957402608BFBFC96BA38E78E0598151C0D72B909AA0733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Zapret2-GUI-v0.5.1-portable.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Zapret2-GUI-v0.5.1-portable.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Zapret2-GUI-v0.5.1-portable.exe
- Size 2.4MB
- SHA256 8f57d1a9f46c746cbda0e98d26d367d8bc117d1422b91b900cbfbdf3d2b81078
- MD5 a555770bf8bd408f5a1ba661e3f0e016
- SHA1 f6dcc0e2eb9705fc99067c68ec3008a250ab0e1a
- SHA512 84cbe8bc08adda1ba004be83ff159d0507294a1b6ca34cf453a5f1434bfc7cecd457528c12d53be8c42dda7a4dd96de528586e7a1ada43db4f0a6b4c9a66059a
- SSDEEP 49152:uSkMtuTQ5NorTHGxnUta5bvLokMbHKl1asOOs:uzMtuUHUS1zdDokMjKoj
- TLSH T191C5BE1233FD865AF1F76B75957402608BFBFC96BA38E78E0598151C0D72B909AA0733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.