Overview
overview
7Static
static
7Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....ms.dll
windows7-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....pf.dll
windows7-x64
1Microsoft....pf.dll
windows10-2004-x64
1Nezur Executor.exe
windows7-x64
1Nezur Executor.exe
windows10-2004-x64
1Nezur.dll
windows7-x64
5Nezur.dll
windows10-2004-x64
7Nezur_Interface.exe
windows7-x64
1Nezur_Interface.exe
windows10-2004-x64
1f_000001.js
windows7-x64
3f_000001.js
windows10-2004-x64
3f_000002.js
windows7-x64
3f_000002.js
windows10-2004-x64
Nezur_Inte...re.dll
windows7-x64
1Nezur_Inte...re.dll
windows10-2004-x64
1Nezur_Inte...pet.js
windows7-x64
3Nezur_Inte...pet.js
windows10-2004-x64
3Nezur_Inte...dm.dll
windows7-x64
1Nezur_Inte...dm.dll
windows10-2004-x64
1Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1runtimes/w...er.dll
windows7-x64
1runtimes/w...er.dll
windows10-2004-x64
1runtimes/w...er.dll
windows10-2004-x64
1runtimes/w...er.dll
windows10-2004-x64
3Analysis
-
max time kernel
124s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30-09-2024 08:58
Behavioral task
behavioral1
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Nezur Executor.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Nezur Executor.exe
Resource
win10v2004-20240910-en
Behavioral task
behavioral9
Sample
Nezur.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Nezur.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Nezur_Interface.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Nezur_Interface.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
f_000001.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
f_000001.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
f_000002.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
f_000002.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Nezur_Interface.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Nezur_Interface.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Nezur_Interface.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Nezur_Interface.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Nezur_Interface.exe.WebView2/EBWebView/WidevineCdm/4.10.2830.1/_platform_specific/win_x64/widevinecdm.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Nezur_Interface.exe.WebView2/EBWebView/WidevineCdm/4.10.2830.1/_platform_specific/win_x64/widevinecdm.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Microsoft.CognitiveServices.Speech.core.dll
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
Microsoft.CognitiveServices.Speech.core.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
runtimes/win-arm64/native/WebView2Loader.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
runtimes/win-arm64/native/WebView2Loader.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
runtimes/win-x64/native/WebView2Loader.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral28
Sample
runtimes/win-x86/native/WebView2Loader.dll
Resource
win10v2004-20240802-en
General
-
Target
Nezur_Interface.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js
-
Size
2KB
-
MD5
f5c93c471485f4b9ab45260518c30267
-
SHA1
ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
-
SHA256
9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
-
SHA512
e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe "C:\Users\Admin\AppData\Local\Temp\Nezur_Interface.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.55\adblock_snippet.js"1⤵PID:1452
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3996,i,1729213506309163284,12809566808978835441,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:81⤵PID:336