Overview
overview
3Static
static
3Dead Zone ...r3.dll
windows10-2004-x64
1Dead Zone ...ro.exe
windows10-2004-x64
1Dead Zone ...ro.exe
windows11-ltsc_2024-x64
1Dead Zone ...r3.dll
windows10-2004-x64
1Dead Zone ...r3.dll
windows11-ltsc_2024-x64
1Dead Zone ...r3.dll
windows10-2004-x64
1Dead Zone ...r3.dll
windows11-ltsc_2024-x64
1Dead Zone ...r3.dll
windows10-2004-x64
1Dead Zone ...r3.dll
windows11-ltsc_2024-x64
1Dead Zone ...r3.dll
windows10-2004-x64
1Dead Zone ...r3.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/11/2026, 03:53
Static task
static1
Behavioral task
behavioral1
Sample
Dead Zone Recycle Macro self-contained 0.2/D3DCompiler_47_cor3.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Dead Zone Recycle Macro self-contained 0.2/Dead Zone Recycle Macro.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
Dead Zone Recycle Macro self-contained 0.2/Dead Zone Recycle Macro.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral4
Sample
Dead Zone Recycle Macro self-contained 0.2/PenImc_cor3.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
Dead Zone Recycle Macro self-contained 0.2/PenImc_cor3.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral6
Sample
Dead Zone Recycle Macro self-contained 0.2/PresentationNative_cor3.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
Dead Zone Recycle Macro self-contained 0.2/PresentationNative_cor3.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral8
Sample
Dead Zone Recycle Macro self-contained 0.2/vcruntime140_cor3.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
Dead Zone Recycle Macro self-contained 0.2/vcruntime140_cor3.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
Dead Zone Recycle Macro self-contained 0.2/wpfgfx_cor3.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
Dead Zone Recycle Macro self-contained 0.2/wpfgfx_cor3.dll
Resource
win11ltsc2024-20260911-en
General
- Target Dead Zone Recycle Macro self-contained 0.2/Dead Zone Recycle Macro.exe
- Size 161.7MB
- Sample261110-eft9vscg32
- SHA256 ca7f428424a82ff860ff0e63c38a854bac13be9a7913561a017ce2ed00afcb49
- MD5 a08ade7dbc12eb4d048b6532353712ce
- SHA1 3f76156eea36645395f8bb9ffb5e93b2e072ad41
- SHA512 f818fb612e4b094e630eb36d2c49ed8899079a19b528dc02fc7aaf4c047d52ee5162b62b2bba537b242b2711e842a534af6f21bd3e121c12da39bc0a63af69a5
- SSDEEP 786432:8O8Z9gAi+iV5OtsFj/WNaNCoGwN7C6xkIyKAXW9FqM/jsxS6f0dxjMJPoElisj/P:8PK/N+aYo1k6xLy3QFEoizboS
- TLSH T116889D11ABEC1A19E1BFC274E7728692D6B4BD925314C1CF0484FA4D2E73BC1A936376
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5016 Dead Zone Recycle Macro.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5016 Dead Zone Recycle Macro.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Dead Zone Recycle Macro self-contained 0.2\Dead Zone Recycle Macro.exe"C:\Users\Admin\AppData\Local\Temp\Dead Zone Recycle Macro self-contained 0.2\Dead Zone Recycle Macro.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:5016