a38445b8edee8403ba83377d41485cdbb8a727d500d63249c2a61006c9fad0b5

General

Target
ZynovaV1.1.1.zip
Size 47.4MB
Sample261104-3mt5fa1w2p
SHA256 a38445b8edee8403ba83377d41485cdbb8a727d500d63249c2a61006c9fad0b5
MD5 756874c03acca8642ab090c9eaa38cc2
SHA1 7f21f4826cdde61ff6f807640c70de3b60079197
SHA512 6a35fc33bdfd8cc1af631f900ef44cbd7ae2d77a1b596537119604af805ac4b8590538b4fe748358fc29c8add1cc32ed1814f14229c57105ea1f4021217290fe
SSDEEP 786432:1Zt3lmqFjKoOxuxSyBra1ieN4M5dzccFWDbKaVTCfvEoCILG/7tM8xbHy/hZaG7:1Zt3lmqFkYxra1NNvJ74DbKaVGfcIqzG
TLSH
T1E2B733B15216F4CCECEC258F5041948E55702A22BD5E691CB19643232E9EEE27CFBCB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Targets

- Target
  Injector.exe
- Size 25.9MB
- SHA256 375374945fd7379efac3d8bebbefb2c6bb3ad576d62a4bc1fad07808251978b3
- MD5 d4a4e18838325b3d77c578ee48df1f47
- SHA1 dc623438230f017e7847c2835957cdcc392c7ed3
- SHA512 c3bd200205b61d9206cf51a53aebd29d4fbe4d6c4c3da488a67dfb2fb48a8ca878e6744ac11ede1b26197263ef1d95c2b5ad017b3c27e91576734b359797590a
- SSDEEP 786432:C3qpYTl/m879C4uvSX8IF2fB+0YRkzHwfu:CeYTl/m87UaLC+0Y+bZ
- TLSH
  T1A257238B68D5E2F4D3D34A0092CF13DA97D271DBC5DA561E11C6A8033521EDB8B8AD3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral1 behavioral2
- Target
  Zynova.exe
- Size 27.6MB
- SHA256 75e751676f5eb432f0f082b3776da6954353a2ed12d8f7f750ac3e4a666610e2
- MD5 da4f8023dec0db8623ef1fa4d0ae99d2
- SHA1 0429f1b7582e828e4d54b1555bd918a54bae2bc3
- SHA512 71972c85d3fcfaf8a2aaff04f83506831dde145eee76f5f99df96981ed7dc65bf1398ccb55f3e11e1bef23c51ab5b0d968820b0f2addc7411d6856d360d387dc
- SSDEEP 393216:cXAAbVuXWl6UtwFB8Z8JE20UTc9pk2wwzwU+3fMrQdi+WRzwUIt+GlxwhoHm:cXAA8fB8i9Tc9pk2wwzwj3fAjRs+G
- TLSH
  T1395723A757DAA3C4E7C21844658542DA36C1A8CDC4FDC82D3ACB5C026934DFB9989EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral3 behavioral4
- Target
  ZynovaModule.dll
- Size 3.3MB
- SHA256 750cda65136b7bd664bfc6171395f89329f1176e3c5fa16878ca7ee1a5c1e4da
- MD5 6335a5f6ba15ee351bf7b3c20a5447e7
- SHA1 5967a20fdd1aa605ac47f780eb6636df2bd80eb9
- SHA512 d41008e97298586befd8614f05e113390624fda8e8a9845ac8ca069572eb891949400307cad5db81d064a18d43d0e4ac8f99f47f7cefea9b9f8126e961ba4922
- SSDEEP 49152:aG7vIzYcpD/hcQC6wBlh+NkYHY7+9RA7ULWRpuVEgf+0XxgMdR/IuFn/nxT0Ri:awiwoNG7cAB0uadL
- TLSH
  T18EF59E7766E800ECD477C1BCDA978A17E772B4850720A6DF16E446692F27BE00B7E312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

1

T1622

Credential Access

Discovery

Debugger Evasion

1

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6