General

  • Target

    AzSetup.exe

  • Size

    11.0MB

  • Sample

    240419-x8na5aeb71

  • MD5

    65e758371312c1b0f196d71258c5ccc3

  • SHA1

    f5b58a0953d323a7e25c0aa213ba522afb568f5e

  • SHA256

    d311509ef08c9eb1b0505bef41b4ec206b82beb5ee756f680cf4b0bcfab10189

  • SHA512

    4a410c1a3aaebc49b5c5ae59be8c122f7aa4e93962e5a761cebb8e217d3e4f77dbdb38cac414d2e66b6008be5f42856b8260019d64f980502bf45c7221ca50a6

  • SSDEEP

    196608:uASSBboxG8Ts+1AEVHzYZJFprAFxIfoG3xsxocQTpyeqUkVRmPLe:uQkY8Tx1AEwrAvoNxiocs2Vkq

Score
4/10

Malware Config

Targets

    • Target

      AzSetup.exe

    • Size

      11.0MB

    • MD5

      65e758371312c1b0f196d71258c5ccc3

    • SHA1

      f5b58a0953d323a7e25c0aa213ba522afb568f5e

    • SHA256

      d311509ef08c9eb1b0505bef41b4ec206b82beb5ee756f680cf4b0bcfab10189

    • SHA512

      4a410c1a3aaebc49b5c5ae59be8c122f7aa4e93962e5a761cebb8e217d3e4f77dbdb38cac414d2e66b6008be5f42856b8260019d64f980502bf45c7221ca50a6

    • SSDEEP

      196608:uASSBboxG8Ts+1AEVHzYZJFprAFxIfoG3xsxocQTpyeqUkVRmPLe:uQkY8Tx1AEwrAvoNxiocs2Vkq

    Score
    4/10
    • Target

      $PLUGINSDIR/EmbedHTML.dll

    • Size

      99KB

    • MD5

      c08431578109da597240a3cbaf65fd63

    • SHA1

      687ef12f3db594332a3c9e679b8822eb9bed89e1

    • SHA256

      ee95b019b9c8681be56038bf4a4455f74c4f83c287fbaded6b5aa7b5dcf4a38e

    • SHA512

      8c8814a4c11ebe48be075e228477f394077efac04f2b7ffbc39339270d9a0b699f8398a17aa4cd4a0570c8f8c9e7de757facd30c326f1dde480a799542b07e8f

    • SSDEEP

      1536:nbrMlUndmhyVFzIgJYGjUJjwWcgBAJs8jcdc6I++aSEgKP6Zn3WD:nbrMlUndHuJ3Dc6I++aSEgKP6Zm

    Score
    3/10
    • Target

      $PLUGINSDIR/INetC.dll

    • Size

      24KB

    • MD5

      640bff73a5f8e37b202d911e4749b2e9

    • SHA1

      9588dd7561ab7de3bca392b084bec91f3521c879

    • SHA256

      c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502

    • SHA512

      39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a

    • SSDEEP

      384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh

    Score
    3/10
    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      50016010fb0d8db2bc4cd258ceb43be5

    • SHA1

      44ba95ee12e69da72478cf358c93533a9c7a01dc

    • SHA256

      32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e

    • SHA512

      ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233

    • SSDEEP

      48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      4add245d4ba34b04f213409bfe504c07

    • SHA1

      ef756d6581d70e87d58cc4982e3f4d18e0ea5b09

    • SHA256

      9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706

    • SHA512

      1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d

    • SSDEEP

      192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr

    Score
    3/10
    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      14KB

    • MD5

      adb29e6b186daa765dc750128649b63d

    • SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

    • SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

    • SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

    • SSDEEP

      192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs

    Score
    3/10
    • Target

      $PLUGINSDIR/downloader.exe

    • Size

      203KB

    • MD5

      6922e66413b832878ac33061032d610f

    • SHA1

      0ec966e045149267007cd840798e7b0e0a077786

    • SHA256

      c014b10df32d537cb505efaa593bee22bcb2cd63b1bcd12a7ab44c958031846f

    • SHA512

      2c1ccde7c9bd793f40c3a0c6fc94aa8b8de222ed6eca52ca7249fad79d994200bd48bb1874579984ea74eb2e52d0b7fa7636b6f93fe18a17e76842e84807280f

    • SSDEEP

      3072:XWF1Sss2XaOvu+v7QC2mCAbtoJOBW0rArwrkut57cIrDjy6HyaPKbY64IrHxzMxz:XWF0+XaOvuyycWNrwrk6yabJIrRzM

    Score
    1/10
    • Target

      vcamp140.dll

    • Size

      390KB

    • MD5

      75002bd6d7d87dd2f13d93fee0fc7f2c

    • SHA1

      799d0bab741bc10d35d238c1280509d3392a75a1

    • SHA256

      a04d363c118d6e1d01d4ce1ff3342cc4b9ba1eaa1eba8ee2bbec1fce9f57b67a

    • SHA512

      91fc96b06e2191f85aac81b0a73d6bb7a7c865329cf3ae1008110dd6cf312a6b744aa653874032942de49eae7e745b0188cf2268c45f518c12a2ad95889e2451

    • SSDEEP

      6144:+kwF2i2gZ7spwy8I/3wsCpcTRGcrDUDeERziBGj1gGWP:W2bQQpwD35wGcrDUPRmBWy

    Score
    3/10
    • Target

      vccorlib140.dll

    • Size

      261KB

    • MD5

      82f1cc1aacfbf938a9d3cf319f9ce470

    • SHA1

      e1ec481ca2e925a7598201bfe129039edbeb47c1

    • SHA256

      ef14aa820af6ac19b61c82e1f9c4932e65c40a65af00b4e037e72ce980e03074

    • SHA512

      f9f11f8e9ddf2604e15cb2c4df42246ec1d9617a6b595c84599e27c21b417d5a7deb12f5152431ad4daf7721d857e5953a3926a868dc06c19a92381a83595b5a

    • SSDEEP

      3072:ytYYbM6DmpMOMfWEZI8eAqvxRpG05tPhmxLqV2rH1xmDC2WYs3nO7eq/EEoYO:yYYbM6pTWoI8eHx/pfmLqV2KJoYO

    Score
    3/10
    • Target

      vcomp140.dll

    • Size

      135KB

    • MD5

      b87b8492acb6f354901e7c5c84739749

    • SHA1

      6b7abc68efa547db761b93baab397d6b7a560739

    • SHA256

      6a058633c9eb8805e3e2e145b7e7aca3e1af15480f6d3b18ed5f051a1fceb738

    • SHA512

      b9f8a811f339d1d0226011b038a6301341700372154a4d5452824ac04a40380b7744a2839f11a3c897ad872b6b84c811f759204c19b41e251a761d590c2ede79

    • SSDEEP

      3072:Kyrx4If0ZGQ62xfOW6Z34bL/wmPV4U/baG5fEqpECoW:MGQ+ZaL/P/2ioW

    Score
    3/10
    • Target

      webControll/index.debug.html

    • Size

      28KB

    • MD5

      b5e554bd8854b7bd93b087b19c77eb1e

    • SHA1

      c5fa9299dce803f3f90723a5f002a5b0535734b4

    • SHA256

      0bfee7f46a97322dd12fa0af8b5ec09df272781ec5e25903cfcf8c331577637e

    • SHA512

      c77294c16d0dfd6d17f261eaf76a4ebdaa3ee42f80b915e1d03b2913a37350c56e2ff53cbb6b2c68fc05db99873e5ced25abda64e21f8a7a8566c61ab5e4a775

    • SSDEEP

      384:0qcq0aWA2p7Ed822KIR+TQKCY/26mFkh9eMh5kuMk3IkrIkZIk/k34qsgtLIAwBj:hTWAld821IJFihXHbjRnp+8KoTD

    Score
    1/10
    • Target

      webControll/index.html

    • Size

      28KB

    • MD5

      1c8d91ae52e8d5826a56d07c4344ace0

    • SHA1

      bc0b0e5533eecd6f9d259b8018dd18892381d228

    • SHA256

      f813414226b020ac17e60944966d96422873bb0024ba6d27a5004948ee440b58

    • SHA512

      9596861e9a31291f5793f0758a85a3d2417e45cf0017dd2d01c01fb524551e1953db3b1b0f3bba283d9843faabb07646f2d7c0b3afa41ec115d792377dd56641

    • SSDEEP

      384:tqcq0aWA2p7Ed822KIR+TQKCY/26mFkF9eMh5kuMk3IkrIkZIk/k34qsgtLIAwBn:UTWAld821IJFiFXHbjRnp+8Koz

    Score
    1/10
    • Target

      webControll/js/backbone.js

    • Size

      71KB

    • MD5

      e3a720a7df290887e3b675a82c17b058

    • SHA1

      56454afb98d153ffd08720fd1a2657f7bb3b08d5

    • SHA256

      628eb542c3be7a11ddb432aa990ec78cb5053bd5bbb4d14860504347c4298392

    • SHA512

      8152db080f797812285e81bbc1bdf008d8a0bbcc058aa4d7d24968df04fbfcf9f50cd0b39657700372eeddfddf40e871e06e16c2b57c0dd5f08ba8a34eeb434a

    • SSDEEP

      1536:fmYDSAyRDniN1wXT90wHZkPWR2+3lS7Jh:BDSAy61wXhqEI7H

    Score
    1/10
    • Target

      webControll/js/backbone.min.js

    • Size

      30KB

    • MD5

      7454b19594bd0ab44751433fbc2852cf

    • SHA1

      6afa0186d2557a5ef25896bcbfa07c769eca3779

    • SHA256

      127b33e977c13c2654fcfef2ccb2e4231b2a32a89125489c007c78438dd1bac0

    • SHA512

      b88d484064c202cccc0f8c9dcd194479280873853c38111d4d0943f70bee4c42b91b35836de2951470718b6b9d53c34a6e06e38f51ee8d63cf85d33f00bb15e2

    • SSDEEP

      768:7GfEJWeaAXPEQucwh0AumONAbezbUyF2Ky+sU:7GWbL5

    Score
    1/10
    • Target

      webControll/js/bootstrap.js

    • Size

      68KB

    • MD5

      62d92e6daef56424e9cf091ab9a4d02f

    • SHA1

      ccc94b461d0d53d1d7c1b0d1ec0ce4adcea94ea7

    • SHA256

      4481c6d0cf707d271b1a8ddc10b2d11257aa2074d6d8de12034f806e86992372

    • SHA512

      bb6c5ccac22f0005fd66c6d6a62fc5c7678a90a34f4802edd85afd776e600185a14d1f062e2886f5c67d7a4c88bbb41e87c67fcb00c8353649fe79ad7e7add16

    • SSDEEP

      384:E6hwVn9lFwSVc36E2gVcC8Se+5Bo0oCVEru+4leqC6piw0I0BzrXNDMwTM1KRD8J:dhwVn9lFwh37FlEUlemMDdJcKRDSLVH

    Score
    1/10
    • Target

      webControll/js/bootstrap.min.js

    • Size

      44KB

    • MD5

      3e22137d28d9a9ca21e6cdde3554a193

    • SHA1

      506ede06785eb2eb178a1bb804d307e347f3dca3

    • SHA256

      cdbdb8e143c046550bc932b3456023ce12ea3076481a43701cc6e45564d9a8d0

    • SHA512

      b177c5f3e25e4504ceb96097fb66a795845d4f82d5b7b144f87b9d5a119c82209b722b8b88bc9b7c0ee98e9c6af13d288d089f9d92fa29a22ce01e0c3c1c00c0

    • SSDEEP

      768:r+F04/e5qcc8T9IdFaIXJcVD5Hw+8jFW+a47+0IOK+2lEIm0UG833yALdoD9PRm:ye0+O9ZIhdALKE

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks