f4ca65e152fb782fe1e4b56625f482f87592be42e7bb7f82ce8e438fa31ad97c

Submit
Reports

Overview

overview

Static

static

Microsoft....re.dll

windows7-x64

Microsoft....re.dll

windows10-2004-x64

Microsoft....ms.dll

windows7-x64

Microsoft....ms.dll

windows10-2004-x64

Microsoft....pf.dll

windows7-x64

Microsoft....pf.dll

windows10-2004-x64

Nezur Executor.exe

windows7-x64

Nezur Executor.exe

windows10-2004-x64

Nezur.dll

windows7-x64

Nezur.dll

windows10-2004-x64

Nezur_Interface.exe

windows7-x64

Nezur_Interface.exe

windows10-2004-x64

f_000001.js

windows7-x64

f_000001.js

windows10-2004-x64

f_000002.js

windows7-x64

f_000002.js

windows10-2004-x64

Nezur_Inte...re.dll

windows7-x64

Nezur_Inte...re.dll

windows10-2004-x64

Nezur_Inte...pet.js

windows7-x64

Nezur_Inte...pet.js

windows10-2004-x64

Nezur_Inte...dm.dll

windows7-x64

Nezur_Inte...dm.dll

windows10-2004-x64

Microsoft....re.dll

windows7-x64

Microsoft....re.dll

windows10-2004-x64

runtimes/w...er.dll

windows7-x64

runtimes/w...er.dll

windows10-2004-x64

runtimes/w...er.dll

windows10-2004-x64

runtimes/w...er.dll

windows10-2004-x64

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
30-09-2024 08:58

Sharing

Copy URL

Twitter E-mail

Static task

static1

themida

2 signatures

Behavioral task

behavioral1

Sample

Microsoft.Web.WebView2.Core.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Microsoft.Web.WebView2.Core.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Microsoft.Web.WebView2.WinForms.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Microsoft.Web.WebView2.WinForms.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Microsoft.Web.WebView2.Wpf.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Microsoft.Web.WebView2.Wpf.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Nezur Executor.exe

Resource

win7-20240704-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Nezur Executor.exe

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Nezur.dll

Resource

win7-20240708-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Nezur.dll

Resource

win10v2004-20240802-en

themida

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Nezur_Interface.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Nezur_Interface.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

f_000001.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

f_000001.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

f_000002.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

f_000002.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Nezur_Interface.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Nezur_Interface.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Nezur_Interface.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Nezur_Interface.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.55/adblock_snippet.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Nezur_Interface.exe.WebView2/EBWebView/WidevineCdm/4.10.2830.1/_platform_specific/win_x64/widevinecdm.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Nezur_Interface.exe.WebView2/EBWebView/WidevineCdm/4.10.2830.1/_platform_specific/win_x64/widevinecdm.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Microsoft.CognitiveServices.Speech.core.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Microsoft.CognitiveServices.Speech.core.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

runtimes/win-arm64/native/WebView2Loader.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

runtimes/win-arm64/native/WebView2Loader.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

runtimes/win-x64/native/WebView2Loader.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

runtimes/win-x86/native/WebView2Loader.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Nezur.dll
Size

13.4MB
MD5

a11b836a0d9542ad11e8365ca38b7a72
SHA1

41623d4eb0c55e78483b7c4ff61db823100074a1
SHA256

350d6052da152aca33209aa854ceacbd1a3d92fbaccbf06449569f7c22dacaeb
SHA512

a7d0ccabdb914b752ef4b9c6dbd3977f7aacf6dc37898d424a146fb47fe84af2bd794629b2a787590f7c6c7605c52f7bdfeaf905294e14e0388a18890d800ee8
SSDEEP

393216:+1BqES3Fx3ZHp6gXT8X21lSbb1A2sPYJ5Ydacjyr:EwbHZ7XTYb5A2lYdaRr

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2396	rundll32.exe
2396	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Nezur.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2396

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads