Overview
overview
4Static
static
3AzSetup.exe
windows7-x64
4AzSetup.exe
windows10-2004-x64
4$PLUGINSDI...ML.dll
windows7-x64
3$PLUGINSDI...ML.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows7-x64
3$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...er.exe
windows7-x64
1$PLUGINSDI...er.exe
windows10-2004-x64
1vcamp140.dll
windows7-x64
3vcamp140.dll
windows10-2004-x64
3vccorlib140.dll
windows7-x64
1vccorlib140.dll
windows10-2004-x64
3vcomp140.dll
windows7-x64
1vcomp140.dll
windows10-2004-x64
3webControl...g.html
windows7-x64
1webControl...g.html
windows10-2004-x64
1webControl...x.html
windows7-x64
1webControl...x.html
windows10-2004-x64
1webControl...one.js
windows7-x64
1webControl...one.js
windows10-2004-x64
1webControl...min.js
windows7-x64
1webControl...min.js
windows10-2004-x64
1webControl...rap.js
windows7-x64
1webControl...rap.js
windows10-2004-x64
1webControl...min.js
windows7-x64
1webControl...min.js
windows10-2004-x64
1General
-
Target
AzSetup.exe
-
Size
11.0MB
-
Sample
240419-x8na5aeb71
-
MD5
65e758371312c1b0f196d71258c5ccc3
-
SHA1
f5b58a0953d323a7e25c0aa213ba522afb568f5e
-
SHA256
d311509ef08c9eb1b0505bef41b4ec206b82beb5ee756f680cf4b0bcfab10189
-
SHA512
4a410c1a3aaebc49b5c5ae59be8c122f7aa4e93962e5a761cebb8e217d3e4f77dbdb38cac414d2e66b6008be5f42856b8260019d64f980502bf45c7221ca50a6
-
SSDEEP
196608:uASSBboxG8Ts+1AEVHzYZJFprAFxIfoG3xsxocQTpyeqUkVRmPLe:uQkY8Tx1AEwrAvoNxiocs2Vkq
Static task
static1
Behavioral task
behavioral1
Sample
AzSetup.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AzSetup.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/EmbedHTML.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/EmbedHTML.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/INetC.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/downloader.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/downloader.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
vcamp140.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
vcamp140.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
vccorlib140.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
vccorlib140.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
vcomp140.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
vcomp140.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
webControll/index.debug.html
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
webControll/index.debug.html
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
webControll/index.html
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
webControll/index.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
webControll/js/backbone.js
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
webControll/js/backbone.js
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
webControll/js/backbone.min.js
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
webControll/js/backbone.min.js
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
webControll/js/bootstrap.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
webControll/js/bootstrap.js
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
webControll/js/bootstrap.min.js
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
webControll/js/bootstrap.min.js
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
AzSetup.exe
-
Size
11.0MB
-
MD5
65e758371312c1b0f196d71258c5ccc3
-
SHA1
f5b58a0953d323a7e25c0aa213ba522afb568f5e
-
SHA256
d311509ef08c9eb1b0505bef41b4ec206b82beb5ee756f680cf4b0bcfab10189
-
SHA512
4a410c1a3aaebc49b5c5ae59be8c122f7aa4e93962e5a761cebb8e217d3e4f77dbdb38cac414d2e66b6008be5f42856b8260019d64f980502bf45c7221ca50a6
-
SSDEEP
196608:uASSBboxG8Ts+1AEVHzYZJFprAFxIfoG3xsxocQTpyeqUkVRmPLe:uQkY8Tx1AEwrAvoNxiocs2Vkq
Score4/10 -
-
-
Target
$PLUGINSDIR/EmbedHTML.dll
-
Size
99KB
-
MD5
c08431578109da597240a3cbaf65fd63
-
SHA1
687ef12f3db594332a3c9e679b8822eb9bed89e1
-
SHA256
ee95b019b9c8681be56038bf4a4455f74c4f83c287fbaded6b5aa7b5dcf4a38e
-
SHA512
8c8814a4c11ebe48be075e228477f394077efac04f2b7ffbc39339270d9a0b699f8398a17aa4cd4a0570c8f8c9e7de757facd30c326f1dde480a799542b07e8f
-
SSDEEP
1536:nbrMlUndmhyVFzIgJYGjUJjwWcgBAJs8jcdc6I++aSEgKP6Zn3WD:nbrMlUndHuJ3Dc6I++aSEgKP6Zm
Score3/10 -
-
-
Target
$PLUGINSDIR/INetC.dll
-
Size
24KB
-
MD5
640bff73a5f8e37b202d911e4749b2e9
-
SHA1
9588dd7561ab7de3bca392b084bec91f3521c879
-
SHA256
c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
-
SHA512
39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a
-
SSDEEP
384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh
Score3/10 -
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
50016010fb0d8db2bc4cd258ceb43be5
-
SHA1
44ba95ee12e69da72478cf358c93533a9c7a01dc
-
SHA256
32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
-
SHA512
ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
-
SSDEEP
48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
4add245d4ba34b04f213409bfe504c07
-
SHA1
ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
-
SHA256
9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
-
SHA512
1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
-
SSDEEP
192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
Score3/10 -
-
-
Target
$PLUGINSDIR/UAC.dll
-
Size
14KB
-
MD5
adb29e6b186daa765dc750128649b63d
-
SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9
-
SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
-
SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
-
SSDEEP
192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
Score3/10 -
-
-
Target
$PLUGINSDIR/downloader.exe
-
Size
203KB
-
MD5
6922e66413b832878ac33061032d610f
-
SHA1
0ec966e045149267007cd840798e7b0e0a077786
-
SHA256
c014b10df32d537cb505efaa593bee22bcb2cd63b1bcd12a7ab44c958031846f
-
SHA512
2c1ccde7c9bd793f40c3a0c6fc94aa8b8de222ed6eca52ca7249fad79d994200bd48bb1874579984ea74eb2e52d0b7fa7636b6f93fe18a17e76842e84807280f
-
SSDEEP
3072:XWF1Sss2XaOvu+v7QC2mCAbtoJOBW0rArwrkut57cIrDjy6HyaPKbY64IrHxzMxz:XWF0+XaOvuyycWNrwrk6yabJIrRzM
Score1/10 -
-
-
Target
vcamp140.dll
-
Size
390KB
-
MD5
75002bd6d7d87dd2f13d93fee0fc7f2c
-
SHA1
799d0bab741bc10d35d238c1280509d3392a75a1
-
SHA256
a04d363c118d6e1d01d4ce1ff3342cc4b9ba1eaa1eba8ee2bbec1fce9f57b67a
-
SHA512
91fc96b06e2191f85aac81b0a73d6bb7a7c865329cf3ae1008110dd6cf312a6b744aa653874032942de49eae7e745b0188cf2268c45f518c12a2ad95889e2451
-
SSDEEP
6144:+kwF2i2gZ7spwy8I/3wsCpcTRGcrDUDeERziBGj1gGWP:W2bQQpwD35wGcrDUPRmBWy
Score3/10 -
-
-
Target
vccorlib140.dll
-
Size
261KB
-
MD5
82f1cc1aacfbf938a9d3cf319f9ce470
-
SHA1
e1ec481ca2e925a7598201bfe129039edbeb47c1
-
SHA256
ef14aa820af6ac19b61c82e1f9c4932e65c40a65af00b4e037e72ce980e03074
-
SHA512
f9f11f8e9ddf2604e15cb2c4df42246ec1d9617a6b595c84599e27c21b417d5a7deb12f5152431ad4daf7721d857e5953a3926a868dc06c19a92381a83595b5a
-
SSDEEP
3072:ytYYbM6DmpMOMfWEZI8eAqvxRpG05tPhmxLqV2rH1xmDC2WYs3nO7eq/EEoYO:yYYbM6pTWoI8eHx/pfmLqV2KJoYO
Score3/10 -
-
-
Target
vcomp140.dll
-
Size
135KB
-
MD5
b87b8492acb6f354901e7c5c84739749
-
SHA1
6b7abc68efa547db761b93baab397d6b7a560739
-
SHA256
6a058633c9eb8805e3e2e145b7e7aca3e1af15480f6d3b18ed5f051a1fceb738
-
SHA512
b9f8a811f339d1d0226011b038a6301341700372154a4d5452824ac04a40380b7744a2839f11a3c897ad872b6b84c811f759204c19b41e251a761d590c2ede79
-
SSDEEP
3072:Kyrx4If0ZGQ62xfOW6Z34bL/wmPV4U/baG5fEqpECoW:MGQ+ZaL/P/2ioW
Score3/10 -
-
-
Target
webControll/index.debug.html
-
Size
28KB
-
MD5
b5e554bd8854b7bd93b087b19c77eb1e
-
SHA1
c5fa9299dce803f3f90723a5f002a5b0535734b4
-
SHA256
0bfee7f46a97322dd12fa0af8b5ec09df272781ec5e25903cfcf8c331577637e
-
SHA512
c77294c16d0dfd6d17f261eaf76a4ebdaa3ee42f80b915e1d03b2913a37350c56e2ff53cbb6b2c68fc05db99873e5ced25abda64e21f8a7a8566c61ab5e4a775
-
SSDEEP
384:0qcq0aWA2p7Ed822KIR+TQKCY/26mFkh9eMh5kuMk3IkrIkZIk/k34qsgtLIAwBj:hTWAld821IJFihXHbjRnp+8KoTD
Score1/10 -
-
-
Target
webControll/index.html
-
Size
28KB
-
MD5
1c8d91ae52e8d5826a56d07c4344ace0
-
SHA1
bc0b0e5533eecd6f9d259b8018dd18892381d228
-
SHA256
f813414226b020ac17e60944966d96422873bb0024ba6d27a5004948ee440b58
-
SHA512
9596861e9a31291f5793f0758a85a3d2417e45cf0017dd2d01c01fb524551e1953db3b1b0f3bba283d9843faabb07646f2d7c0b3afa41ec115d792377dd56641
-
SSDEEP
384:tqcq0aWA2p7Ed822KIR+TQKCY/26mFkF9eMh5kuMk3IkrIkZIk/k34qsgtLIAwBn:UTWAld821IJFiFXHbjRnp+8Koz
Score1/10 -
-
-
Target
webControll/js/backbone.js
-
Size
71KB
-
MD5
e3a720a7df290887e3b675a82c17b058
-
SHA1
56454afb98d153ffd08720fd1a2657f7bb3b08d5
-
SHA256
628eb542c3be7a11ddb432aa990ec78cb5053bd5bbb4d14860504347c4298392
-
SHA512
8152db080f797812285e81bbc1bdf008d8a0bbcc058aa4d7d24968df04fbfcf9f50cd0b39657700372eeddfddf40e871e06e16c2b57c0dd5f08ba8a34eeb434a
-
SSDEEP
1536:fmYDSAyRDniN1wXT90wHZkPWR2+3lS7Jh:BDSAy61wXhqEI7H
Score1/10 -
-
-
Target
webControll/js/backbone.min.js
-
Size
30KB
-
MD5
7454b19594bd0ab44751433fbc2852cf
-
SHA1
6afa0186d2557a5ef25896bcbfa07c769eca3779
-
SHA256
127b33e977c13c2654fcfef2ccb2e4231b2a32a89125489c007c78438dd1bac0
-
SHA512
b88d484064c202cccc0f8c9dcd194479280873853c38111d4d0943f70bee4c42b91b35836de2951470718b6b9d53c34a6e06e38f51ee8d63cf85d33f00bb15e2
-
SSDEEP
768:7GfEJWeaAXPEQucwh0AumONAbezbUyF2Ky+sU:7GWbL5
Score1/10 -
-
-
Target
webControll/js/bootstrap.js
-
Size
68KB
-
MD5
62d92e6daef56424e9cf091ab9a4d02f
-
SHA1
ccc94b461d0d53d1d7c1b0d1ec0ce4adcea94ea7
-
SHA256
4481c6d0cf707d271b1a8ddc10b2d11257aa2074d6d8de12034f806e86992372
-
SHA512
bb6c5ccac22f0005fd66c6d6a62fc5c7678a90a34f4802edd85afd776e600185a14d1f062e2886f5c67d7a4c88bbb41e87c67fcb00c8353649fe79ad7e7add16
-
SSDEEP
384:E6hwVn9lFwSVc36E2gVcC8Se+5Bo0oCVEru+4leqC6piw0I0BzrXNDMwTM1KRD8J:dhwVn9lFwh37FlEUlemMDdJcKRDSLVH
Score1/10 -
-
-
Target
webControll/js/bootstrap.min.js
-
Size
44KB
-
MD5
3e22137d28d9a9ca21e6cdde3554a193
-
SHA1
506ede06785eb2eb178a1bb804d307e347f3dca3
-
SHA256
cdbdb8e143c046550bc932b3456023ce12ea3076481a43701cc6e45564d9a8d0
-
SHA512
b177c5f3e25e4504ceb96097fb66a795845d4f82d5b7b144f87b9d5a119c82209b722b8b88bc9b7c0ee98e9c6af13d288d089f9d92fa29a22ce01e0c3c1c00c0
-
SSDEEP
768:r+F04/e5qcc8T9IdFaIXJcVD5Hw+8jFW+a47+0IOK+2lEIm0UG833yALdoD9PRm:ye0+O9ZIhdALKE
Score1/10 -