Overview
overview
8Static
static
3zapret/bin...rt.dll
windows10-2004-x64
1zapret/bin...rt.dll
windows11-ltsc_2024-x64
1zapret/bin...64.sys
windows10-2004-x64
3zapret/bin...n1.dll
windows10-2004-x64
1zapret/bin...n1.dll
windows11-ltsc_2024-x64
1zapret/bin/winws2.exe
windows10-2004-x64
1zapret/bin/winws2.exe
windows11-ltsc_2024-x64
1zapret/lua...to.bat
windows10-2004-x64
3zapret/lua...to.bat
windows11-ltsc_2024-x64
3zapret/lua...ib.bat
windows10-2004-x64
3zapret/lua...ib.bat
windows11-ltsc_2024-x64
3zapret/too...ne.ps1
windows10-2004-x64
3zapret/too...ne.ps1
windows11-ltsc_2024-x64
3zapret/tools/diag.ps1
windows10-2004-x64
3zapret/tools/diag.ps1
windows11-ltsc_2024-x64
3zapret/tools/lib.ps1
windows10-2004-x64
3zapret/tools/lib.ps1
windows11-ltsc_2024-x64
3zapret/tools/menu.ps1
windows10-2004-x64
8zapret/tools/menu.ps1
windows11-ltsc_2024-x64
8zapret/too...fy.ps1
windows10-2004-x64
3zapret/too...fy.ps1
windows11-ltsc_2024-x64
3zapret/too...ck.ps1
windows10-2004-x64
7zapret/too...ck.ps1
windows11-ltsc_2024-x64
7zapret/too...rt.ps1
windows10-2004-x64
6zapret/too...rt.ps1
windows11-ltsc_2024-x64
6zapret/tools/scan.ps1
windows10-2004-x64
3zapret/tools/scan.ps1
windows11-ltsc_2024-x64
3zapret/tools/test.ps1
windows10-2004-x64
3zapret/tools/test.ps1
windows11-ltsc_2024-x64
3zapret/too...dge.js
windows10-2004-x64
3zapret/too...dge.js
windows11-ltsc_2024-x64
3zapret/too...ge.ps1
windows10-2004-x64
3Analysis
- max time kernel
150s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/11/2026, 23:50
Static task
static1
Behavioral task
behavioral1
Sample
zapret/bin/WinDivert.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
zapret/bin/WinDivert.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
zapret/bin/WinDivert64.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
zapret/bin/cygwin1.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
zapret/bin/cygwin1.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral6
Sample
zapret/bin/winws2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
zapret/bin/winws2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral8
Sample
zapret/lua/zapret-auto.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
zapret/lua/zapret-auto.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
zapret/lua/zapret-lib.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
zapret/lua/zapret-lib.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral12
Sample
zapret/tools/autotune.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
zapret/tools/autotune.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral14
Sample
zapret/tools/diag.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
zapret/tools/diag.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral16
Sample
zapret/tools/lib.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
zapret/tools/lib.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
zapret/tools/menu.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
zapret/tools/menu.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
zapret/tools/notify.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
zapret/tools/notify.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
zapret/tools/provider-check.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
zapret/tools/provider-check.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
zapret/tools/report.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
zapret/tools/report.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
zapret/tools/scan.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
zapret/tools/scan.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
zapret/tools/test.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
zapret/tools/test.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
zapret/tools/tgbridge.js
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
zapret/tools/tgbridge.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
zapret/tools/tgbridge.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
General
- Target zapret/bin/winws2.exe
- Size 641KB
- Sample261104-3vls2aes9v
- SHA256 ba4ceccdea3576da0a0991a50d7893ea911de197281338132dbec02a5b2fcf58
- MD5 9d6589930197aa1609fe428b689af75e
- SHA1 b7d9fff2d7928d7eff87de037eabc8ba1c3f798c
- SHA512 7ef04d622c4b6c9b67f334308b11d998136b1f8fa7694b0bd72020497ead5d047f6372c5f4f009eb4e70646a12fb68af303a45364b27d2d74d4a0aebcba9090a
- SSDEEP 12288:/dre9GRrrDYC1rhFV48ZzpJhZPRWwUOLIVpBlF1ZM6:JbkC1rhP48xpJ7RTJcVr
- TLSH T11CD47C06E2A248BAC46291718B9ED732B731FC491324AB1E3B64F71C1F35D605A9F76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 3808 winws2.exe Token: SeBackupPrivilege 3808 winws2.exe Token: SeDebugPrivilege 3808 winws2.exe