General
- Target Z-VPN.exe
- Size 44.2MB
- Sample261102-aga56adf79
- SHA256 8dbf88d784109d487a0c973c30ead2ab30aa56369ec9a72bad0adc89a3745abd
- MD5 3c0396dca303f95a95bea392e4024395
- SHA1 13f15ccee6bf60d7ae303226c280aade78b6d05f
- SHA512 6a57dac39768bb41a90c0679ec41b03efa0ccea38ba54b3985354838e0109e654a0ee042544253ef0995948b9f8a51325b5610a026019234272d98086fc6ab08
- SSDEEP 786432:Tul5NVjD6dTGc4Wba+O25SoNjLCq/C/okK13wH2lCilnt2XIJKRRUCwXMb8UsqAD:sVETGcru+O2NNZ4oT13+2kilnfKR+c2P
- TLSH T1A8A73325EBB046E7F977DB7D98B178C57914AA210360C99BA2A503833E372F4B7B4113
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Z-VPN.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Z-VPN.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Z-VPN.exe
- Size 44.2MB
- SHA256 8dbf88d784109d487a0c973c30ead2ab30aa56369ec9a72bad0adc89a3745abd
- MD5 3c0396dca303f95a95bea392e4024395
- SHA1 13f15ccee6bf60d7ae303226c280aade78b6d05f
- SHA512 6a57dac39768bb41a90c0679ec41b03efa0ccea38ba54b3985354838e0109e654a0ee042544253ef0995948b9f8a51325b5610a026019234272d98086fc6ab08
- SSDEEP 786432:Tul5NVjD6dTGc4Wba+O25SoNjLCq/C/okK13wH2lCilnt2XIJKRRUCwXMb8UsqAD:sVETGcru+O2NNZ4oT13+2kilnfKR+c2P
- TLSH T1A8A73325EBB046E7F977DB7D98B178C57914AA210360C99BA2A503833E372F4B7B4113
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.