General
- Target ZARAR-PREMIUM_protected.exe
- Size 1001KB
- Sample261107-yc8smafv2j
- SHA256 5373fb7a8f36c910a50ab9b925b41b12c7882270a3104002799245c75852777d
- MD5 3a1691a4f36db50ae4be953b2bacac4c
- SHA1 3ce9d05f85a89a328a8f661ca590a348f29ff97e
- SHA512 828652a3374cc9a83f7f1548f94f1a54b560467e60bc11c9cbc2d0f8279d5fba0a0c8489b26195d121401b4aef57cc58261ed598a4a963e0148bf62f1b1e7fe3
- SSDEEP 12288:Gq49PKVDIjImpNhLmzVjvQt46mjEQDAyASV3QKxlDp6022CpPIgcCoO:X49PCDIjL1K5bKkdNAeDp6x2CpPbcxO
- TLSH T16825F5546AF24821EB288B7C4657B51C37E7B2F566306B1F9BC6CCF6CC0B2C1A02656D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZARAR-PREMIUM_protected.exe
Resource
win11-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ZARAR-PREMIUM_protected.exe
- Size 1001KB
- SHA256 5373fb7a8f36c910a50ab9b925b41b12c7882270a3104002799245c75852777d
- MD5 3a1691a4f36db50ae4be953b2bacac4c
- SHA1 3ce9d05f85a89a328a8f661ca590a348f29ff97e
- SHA512 828652a3374cc9a83f7f1548f94f1a54b560467e60bc11c9cbc2d0f8279d5fba0a0c8489b26195d121401b4aef57cc58261ed598a4a963e0148bf62f1b1e7fe3
- SSDEEP 12288:Gq49PKVDIjImpNhLmzVjvQt46mjEQDAyASV3QKxlDp6022CpPIgcCoO:X49PCDIjL1K5bKkdNAeDp6x2CpPbcxO
- TLSH T16825F5546AF24821EB288B7C4657B51C37E7B2F566306B1F9BC6CCF6CC0B2C1A02656D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.