Overview

overview

3

Static

static

3

_internal/...40.dll

windows7-x64

1

_internal/...40.dll

windows10-2004-x64

1

_internal/..._1.dll

windows7-x64

1

_internal/..._1.dll

windows10-2004-x64

1

_internal/...io.dll

windows7-x64

1

_internal/...io.dll

windows10-2004-x64

1

_internal/_bz2.dll

windows7-x64

1

_internal/_bz2.dll

windows10-2004-x64

1

_internal/_ctypes.dll

windows7-x64

1

_internal/_ctypes.dll

windows10-2004-x64

1

_internal/...al.dll

windows7-x64

1

_internal/...al.dll

windows10-2004-x64

1

_internal/...ib.dll

windows7-x64

1

_internal/...ib.dll

windows10-2004-x64

1

_internal/_lzma.dll

windows7-x64

1

_internal/_lzma.dll

windows10-2004-x64

1

_internal/...ng.dll

windows7-x64

1

_internal/...ng.dll

windows10-2004-x64

1

_internal/...ed.dll

windows7-x64

1

_internal/...ed.dll

windows10-2004-x64

1

_internal/_queue.dll

windows7-x64

1

_internal/_queue.dll

windows10-2004-x64

1

_internal/_ssl.dll

windows7-x64

1

_internal/_ssl.dll

windows10-2004-x64

1

_internal/_wmi.dll

windows7-x64

1

_internal/_wmi.dll

windows10-2004-x64

1

_internal/...-0.dll

windows10-2004-x64

1

_internal/...-0.dll

windows10-2004-x64

1

_internal/...-0.dll

windows10-2004-x64

1

_internal/...-0.dll

windows10-2004-x64

1

_internal/...-0.dll

windows10-2004-x64

1

_internal/...-0.dll

windows10-2004-x64

1

Resubmissions

07/03/2024, 02:15

240307-cp13naec3w 3

07/03/2024, 02:10

240307-cl4z5seb8y 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nezur_Loader.zip

  • Size

    130.1MB

  • Sample

    240307-cl4z5seb8y

  • MD5

    d86010fd994d78b2b83c640a7cf56515

  • SHA1

    046ac1a23421dd2c840bd966e6511116ddef1c6a

  • SHA256

    2c1f6e571853dc1f92293b4dcb63a0ebb7419160abc270abee224129321fd4de

  • SHA512

    28295efb8e38f240eaffdbf2b48158b07b5883b39dd3e98d1ed4e05d1d69492adbd9813c95f6f09acb62bf0c183e9f063a2560e7efc7836f4fd4923afa9ce59a

  • SSDEEP

    3145728:ZMbMTzRZz8957gzyytubF7M0nj1iw8szoamPmOreRwq2rS:ZMbMT1Yh4VtubFL8ImPqmqmS

Score
3/10
pyinstaller

Malware Config

Targets

    • Target

      _internal/VCRUNTIME140.dll

    • Size

      116KB

    • MD5

      be8dbe2dc77ebe7f88f910c61aec691a

    • SHA1

      a19f08bb2b1c1de5bb61daf9f2304531321e0e40

    • SHA256

      4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

    • SHA512

      0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

    • SSDEEP

      1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho

    Score
    1/10
    behavioral1behavioral2

    • Target

      _internal/VCRUNTIME140_1.dll

    • Size

      48KB

    • MD5

      f8dfa78045620cf8a732e67d1b1eb53d

    • SHA1

      ff9a604d8c99405bfdbbf4295825d3fcbc792704

    • SHA256

      a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5

    • SHA512

      ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371

    • SSDEEP

      768:wPIyGVrxmKqOnA4j3z6Su77A+i0QLxi9z9Rtii9zn+:fBr87uW1nA8QLx+zrti+zn+

    Score
    1/10
    behavioral3behavioral4

    • Target

      _internal/_asyncio.pyd

    • Size

      69KB

    • MD5

      70fb0b118ac9fd3292dde530e1d789b8

    • SHA1

      4adc8d81e74fc04bce64baf4f6147078eefbab33

    • SHA256

      f8305023f6ad81ddc7124b311e500a58914b05a9b072bf9a6d079ea0f6257793

    • SHA512

      1ab72ea9f96c6153b9b5d82b01354381b04b93b7d58c0b54a441b6a748c81cccd2fc27bb3b10350ab376ff5ada9d83af67cce17e21ccbf25722baf1f2aef3c98

    • SSDEEP

      1536:FRaPPkvNV036Fi9PQ1TUT8TIL11Miu0FIpOn27SyTxq:janCNV064YRUT8TIL11MV0FIpOn2S

    Score
    1/10
    behavioral5behavioral6

    • Target

      _internal/_bz2.pyd

    • Size

      82KB

    • MD5

      90f58f625a6655f80c35532a087a0319

    • SHA1

      d4a7834201bd796dc786b0eb923f8ec5d60f719b

    • SHA256

      bd8621fcc901fa1de3961d93184f61ea71068c436794af2a4449738ccf949946

    • SHA512

      b5bb1ecc195700ad7bea5b025503edd3770b1f845f9beee4b067235c4e63496d6e0b19bdd2a42a1b6591d1131a2dc9f627b2ae8036e294300bb6983ecd644dc8

    • SSDEEP

      1536:ES7z7Sj2u5ia5ifC83zYLzbCK8CkotIpCVF7SyTUxIS:/7z+jw3MzCNCkotIpCVF+

    Score
    1/10
    behavioral7behavioral8

    • Target

      _internal/_ctypes.pyd

    • Size

      122KB

    • MD5

      452305c8c5fda12f082834c3120db10a

    • SHA1

      9bab7b3fd85b3c0f2bedc3c5adb68b2579daa6e7

    • SHA256

      543ce9d6dc3693362271a2c6e7d7fc07ad75327e0b0322301dd29886467b0b0e

    • SHA512

      3d52afdbc8da74262475abc8f81415a0c368be70dbf5b2bd87c9c29ca3d14c44770a5b8b2e7c082f3ece0fd2ba1f98348a04b106a48d479fa6bd062712be8f7c

    • SSDEEP

      3072:PGTMA4TPG40srrYLGNyf/ECZGKgyWLRECBIpLPIuE:Otgp0swLvf/EKCkE

    Score
    1/10
    behavioral10behavioral9

    • Target

      _internal/_decimal.pyd

    • Size

      247KB

    • MD5

      f78f9855d2a7ca940b6be51d68b80bf2

    • SHA1

      fd8af3dbd7b0ea3de2274517c74186cb7cd81a05

    • SHA256

      d4ae192bbd4627fc9487a2c1cd9869d1b461c20cfd338194e87f5cf882bbed12

    • SHA512

      6b68c434a6f8c436d890d3c1229d332bd878e5777c421799f84d79679e998b95d2d4a013b09f50c5de4c6a85fcceb796f3c486e36a10cbac509a0da8d8102b18

    • SSDEEP

      6144:kgd/2mZLgPFIY9qWM53pLW1AepppzoeteKU:JZLgPykeKU

    Score
    1/10
    behavioral11behavioral12

    • Target

      _internal/_hashlib.pyd

    • Size

      64KB

    • MD5

      8baeb2bd6e52ba38f445ef71ef43a6b8

    • SHA1

      4132f9cd06343ef8b5b60dc8a62be049aa3270c2

    • SHA256

      6c50c9801a5caf0bb52b384f9a0d5a4aa182ca835f293a39e8999cf6edf2f087

    • SHA512

      804a4e19ea622646cea9e0f8c1e284b7f2d02f3620199fa6930dbdadc654fa137c1e12757f87c3a1a71ceff9244aa2f598ee70d345469ca32a0400563fe3aa65

    • SSDEEP

      1536:uElYij3wzR1lBafLEmIRhFIpOIi7SyHqxn:zYdBaTEmghFIpOIiu

    Score
    1/10
    behavioral13behavioral14

    • Target

      _internal/_lzma.pyd

    • Size

      155KB

    • MD5

      cf8de1137f36141afd9ff7c52a3264ee

    • SHA1

      afde95a1d7a545d913387624ef48c60f23cf4a3f

    • SHA256

      22d10e2d6ad3e3ed3c49eb79ab69a81aaa9d16aeca7f948da2fe80877f106c16

    • SHA512

      821985ff5bc421bd16b2fa5f77f1f4bf8472d0d1564bc5768e4dbe866ec52865a98356bb3ef23a380058acd0a25cd5a40a1e0dae479f15863e48c4482c89a03f

    • SSDEEP

      3072:kEVLLSVeexIDteznfV9mNoNMuX4mZp7zuNtIpZ1uV:kEVHbeye9YON1buNN

    Score
    1/10
    behavioral15behavioral16

    • Target

      _internal/_multiprocessing.pyd

    • Size

      34KB

    • MD5

      c0a06aebbd57d2420037162fa5a3142b

    • SHA1

      1d82ba750128eb51070cdeb0c69ac75117e53b43

    • SHA256

      5673b594e70d1fdaad3895fc8c3676252b7b675656fb88ef3410bc93bb0e7687

    • SHA512

      ddf2c4d22b2371a8602601a05418ef712e03def66e2d8e8814853cdd989ed457efbd6032f4a4a3e9ecca9915d99c249dfd672670046461a9fe510a94da085fbf

    • SSDEEP

      768:sgYvrenSE0PcxxQ0zi+m1IpWtz5YiSyvyAMxkEs1:JYTQSCxQ0zlm1IpWt97Sy4xu

    Score
    1/10
    behavioral17behavioral18

    • Target

      _internal/_overlapped.pyd

    • Size

      54KB

    • MD5

      54c021e10f9901bf782c24d648a82b96

    • SHA1

      cf173cc0a17308d7d87b62c1169b7b99655458bc

    • SHA256

      2e53cc1bfa6e10a4de7e1f4081c5b952746e2d4fa7f8b9929ad818ce20b2cc9f

    • SHA512

      e451226ece8c34c73e5b31e06fdc1d99e073e6e0651a0c5e04b0cf011e79d0747da7a5b6c5e94aca44cfceb9e85ce3d85afff081a574d1f53f115e39e9d4ff6c

    • SSDEEP

      1536:3XRnts3McbN6w/xzWSsXZdR1r35IpXtW7Sy56xk3:HRvisXZdR1r5IpXtWz3

    Score
    1/10
    behavioral19behavioral20

    • Target

      _internal/_queue.pyd

    • Size

      31KB

    • MD5

      5aa4b057ba2331eed6b4b30f4b3e0d52

    • SHA1

      6b9db113c2882743984c3d8b70ec49fc4a136c23

    • SHA256

      d43dca0e00c3c11329b68177e967cf5240495c4786f5afa76ac4f267c3a5cdb9

    • SHA512

      aa5aa3285ea5c177eca055949c5f550dbd2d2699202a29efe2077213cbc95fff2a36d99eecce249ac04d95baf149b3d8c557a67fc39ead3229f0b329e83447b7

    • SSDEEP

      768:0k+Eq6rf65MoJ/MBIpQUh5YiSyv/AMxkEG:55fhoJEBIpQUP7SynxC

    Score
    1/10
    behavioral21behavioral22

    • Target

      _internal/_ssl.pyd

    • Size

      173KB

    • MD5

      6774d6fb8b9e7025254148dc32c49f47

    • SHA1

      212e232da95ec8473eb0304cf89a5baf29020137

    • SHA256

      2b6f1b1ac47cb7878b62e8d6bb587052f86ca8145b05a261e855305b9ca3d36c

    • SHA512

      5d9247dce96599160045962af86fc9e5439f66a7e8d15d1d00726ec1b3b49d9dd172d667380d644d05cb18e45a5419c2594b4bcf5a16ea01542ae4d7d9a05c6e

    • SSDEEP

      3072:ECRW4ljuyKK8vZktW5NP6Xf9N54eNWXvM4VRJNI7IM/cbP7RHs3FJZtIpC7f6:EmfEyKKaZP6Xf92MSV+JZM

    Score
    1/10
    behavioral23behavioral24

    • Target

      _internal/_wmi.pyd

    • Size

      35KB

    • MD5

      cb0564bc74258cb1320c606917ce5a71

    • SHA1

      5b2bfc0d997cc5b7d985bfadddbfc180cb01f7cf

    • SHA256

      0342916a60a7b39bbd5753d85e1c12a4d6f990499753d467018b21cefa49cf32

    • SHA512

      43f3afa9801fcf5574a30f4d3e7ae6aff65c7716462f9aba5bc8055887a44bf38fba121639d8b31427e738752fe3b085d1d924de2633f4c042433e1960023f38

    • SSDEEP

      768:6RxnHG7MYGQd0fmdzA77yeutIpCiq5YiSyvtGAMxkENy:6Rxnm7M6dKmdzA77yeutIpCio7SyCxZy

    Score
    1/10
    behavioral25behavioral26

    • Target

      _internal/api-ms-win-core-console-l1-1-0.dll

    • Size

      13KB

    • MD5

      71405f0ba5d7da5a5f915f33667786de

    • SHA1

      bb5cdf9c12fe500251cf98f0970a47b78c2f8b52

    • SHA256

      0099f17128d1551a47cbd39ce702d4acc4b49be1bb1cfe974fe5a42da01d88eb

    • SHA512

      b2c6438541c4fa7af3f8a9606f64eeef5d77ddbc0689e7501074bb72b7cc907a8461a75089e5b70b881bc3b1be009888ff25ea866faaf1c49dd521027041295a

    • SSDEEP

      192:WfBWfhWooeWvcuyjS7HnhWgN7a8WhlZGh+Il+jX01k9z3ARCvXD8N:W5WfhWd7HRN7sOEjR9zSSG

    Score
    1/10
    behavioral27

    • Target

      _internal/api-ms-win-core-datetime-l1-1-0.dll

    • Size

      12KB

    • MD5

      a17d27e01478c17b88794fd0f79782fc

    • SHA1

      2b8393e7b37fb990be2cdc82803ca49b4cef8546

    • SHA256

      ac227773908836d54c8fc06c4b115f3bdfc82e4d63c7f84e1f8e6e70cd066339

    • SHA512

      ddc6dda49d588f22c934026f55914b31e53079e044dec7b4f1409668dbfe8885b887cc64a411d44f83bc670ac8a8b6d3ad030d4774ef7bf522f1d3bc00e07485

    • SSDEEP

      192:WTWfhWKkeWvcuyjS7HnhWgN7a8WhaYah+Il+jX01k9z3ARiuXLL1w:WTWfhWN7HRN7ISEjR9zS/f2

    Score
    1/10
    behavioral28

    • Target

      _internal/api-ms-win-core-debug-l1-1-0.dll

    • Size

      12KB

    • MD5

      e485c1c5f33ad10eec96e2cdbddff3c7

    • SHA1

      31f6ba9beca535f2fb7ffb755b7c5c87ac8d226c

    • SHA256

      c734022b165b3ba6f8e28670c4190a65c66ec7ecc961811a6bdcd9c7745cac20

    • SHA512

      599036d8fa2e916491bedb5bb49b94458a09dddd2908cf770e94bb0059730598ec5a9b0507e6a21209e2dcae4d74027313df87c9ab51fad66b1d07903bae0b35

    • SSDEEP

      192:W/WfhWJeWvcuyjS7HnhWgN7a8WhpaWGaN4NhrJgX01k9z3An9PLLIh:W/WfhWJ7HRN7svTN4tgR9zYxi

    Score
    1/10
    behavioral29

    • Target

      _internal/api-ms-win-core-errorhandling-l1-1-0.dll

    • Size

      12KB

    • MD5

      0ffb34c0c2cdec47e063c5e0c96b9c3f

    • SHA1

      9716643f727149b953f64b3e1eb6a9f2013eac9c

    • SHA256

      863a07d702717cf818a842af0b4e1dfd6e723f712e49bf8c3af3589434a0ae80

    • SHA512

      4311d582856d9c3cac2cdc6a9da2137df913bcf69041015fd272c2780f6ab850895deb69279a076376a2e6401c907cb23a3052960478a6cf4b566a20cce61bd1

    • SSDEEP

      192:WgmxD3JbDWfhWqjeWvcuyjS7HnhWgN7aUWh1kG1q21eX01k9z3ABfNBnJbIx:WgAbDWfhWo7HRN74l1l8R9zmfNBlg

    Score
    1/10
    behavioral30

    • Target

      _internal/api-ms-win-core-file-l1-1-0.dll

    • Size

      16KB

    • MD5

      792c2b83bc4e0272785aa4f5f252ff07

    • SHA1

      6868b82df48e2315e6235989185c8e13d039a87b

    • SHA256

      d26d433f86223b10ccc55837c3e587fa374cd81efc24b6959435a6770addbf24

    • SHA512

      72c99cff7fd5a762524e19abee5729dc8857f3ee3c8f78587625ec74f2ad96af7dee03aba54b441cda44b04721706bed70f3ad88453a341cbb51aac9afd9559e

    • SSDEEP

      192:W/IAuVYPvVX8rFTs0WfhWueWvcuyjS7HnhWgN7a8Whiah+Il+jX01k9z3AR0Xik3:WVBPvVXuWfhWI7HRN7mEjR9zS0PP

    Score
    1/10
    behavioral31

    • Target

      _internal/api-ms-win-core-file-l1-2-0.dll

    • Size

      12KB

    • MD5

      49e3260ae3f973608f4d4701eb97eb95

    • SHA1

      097e7d56c3514a3c7dc17a9c54a8782c6d6c0a27

    • SHA256

      476fbad616e20312efc943927ade1a830438a6bebb1dd1f83d2370e5343ea7af

    • SHA512

      df22cf16490faa0dc809129ca32eaf1a16ec665f9c5411503ce0153270de038e5d3be1e0e49879a67043a688f6c42bdb5a9a6b3cea43bf533eba087e999be653

    • SSDEEP

      192:WKMWfhW0eWvcuyjS7HnhWgN7a8WhMcy/JdSh+Il+jX01k9z3ARvXdRfn8x:W9WfhWe7HRN7DcMyEjR9zSvn8x

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix

Tasks