Overview
overview
3Static
static
1SAAZOD/Agn...ID.exe
windows10-2004-x64
3SAAZOD/Agn...ID.exe
windows11-21h2-x64
3SAAZOD/Bas...sk.dll
windows10-2004-x64
3SAAZOD/Bas...sk.dll
windows11-21h2-x64
3SAAZOD/Bas...fo.dll
windows10-2004-x64
3SAAZOD/Bas...fo.dll
windows11-21h2-x64
3SAAZOD/Bas...et.exe
windows10-2004-x64
3SAAZOD/Bas...et.exe
windows11-21h2-x64
3SAAZOD/Bas...ed.dll
windows10-2004-x64
3SAAZOD/Bas...ed.dll
windows11-21h2-x64
3SAAZOD/Chi...t2.dll
windows10-2004-x64
3SAAZOD/Chi...t2.dll
windows11-21h2-x64
3SAAZOD/ChilkatXml.dll
windows10-2004-x64
3SAAZOD/ChilkatXml.dll
windows11-21h2-x64
3SAAZOD/Chi...p2.dll
windows10-2004-x64
3SAAZOD/Chi...p2.dll
windows11-21h2-x64
3SAAZOD/ClearLogs.exe
windows10-2004-x64
3SAAZOD/ClearLogs.exe
windows11-21h2-x64
3SAAZOD/DMP...sk.exe
windows10-2004-x64
3SAAZOD/DMP...sk.exe
windows11-21h2-x64
3SAAZOD/SAA...TL.exe
windows10-2004-x64
3SAAZOD/SAA...TL.exe
windows11-21h2-x64
3SAAZOD/SAA...xe.exe
windows10-2004-x64
3SAAZOD/SAA...xe.exe
windows11-21h2-x64
3SAAZOD/SAA...ad.exe
windows10-2004-x64
3SAAZOD/SAA...ad.exe
windows11-21h2-x64
3SAAZOD/SAAZKill.exe
windows10-2004-x64
3SAAZOD/SAAZKill.exe
windows11-21h2-x64
3SAAZOD/SAA...rt.exe
windows10-2004-x64
3SAAZOD/SAA...rt.exe
windows11-21h2-x64
3SAAZOD/SAA...er.exe
windows10-2004-x64
3SAAZOD/SAA...er.exe
windows11-21h2-x64
3General
- Target SAAZOD.zip
- Size 48.6MB
- Sample260424-plnpdaat7p
- SHA256 5e20b903c1221509827a997b53866805945c655081b928aed171ff258f8cb877
- MD5 2c523ed0e872f9a21f131e6e520d8b82
- SHA1 14db07300fb45a4d54fa58c2a595e8b0617248a2
- SHA512 2a85c5e03daa8c7e7a5e8ba60da6d026b9ecb89e48bb020d15333ea5fe7c2ecd4b5c18348acb9d35a1a725dc01286f9f4b7567b0cf4ad9d55537bffbd7760d87
- SSDEEP 1572864:a2TWnQ3paksg8dELyuip/bh2r3WM7pV5QJfUgDuFt5i8xL:a2Tbh8ELyfp8r3WMtQJ8gDuFt089
- TLSH T12CB73397AA4C4F9EDF07E43A56DFFD4C4A19183C601649B2EA1C9E8B12333571AFDA40
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SAAZOD/AgntUninstallPID.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
SAAZOD/AgntUninstallPID.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
SAAZOD/BaseComponents/Asset/SmartDisk.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
SAAZOD/BaseComponents/Asset/SmartDisk.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
SAAZOD/BaseComponents/Asset/SysInfo.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
SAAZOD/BaseComponents/Asset/SysInfo.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
SAAZOD/BaseComponents/Asset/zAsset.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
SAAZOD/BaseComponents/Asset/zAsset.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
SAAZOD/BaseComponents/Asset/zIsSmartEnabled.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
SAAZOD/BaseComponents/Asset/zIsSmartEnabled.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
SAAZOD/ChilkatCrypt2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
SAAZOD/ChilkatCrypt2.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
SAAZOD/ChilkatXml.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
SAAZOD/ChilkatXml.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
SAAZOD/ChilkatZip2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
SAAZOD/ChilkatZip2.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
SAAZOD/ClearLogs.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
SAAZOD/ClearLogs.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
SAAZOD/DMPHelpDesk.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
SAAZOD/DMPHelpDesk.exe
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
SAAZOD/SAAZDPMACTL.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
SAAZOD/SAAZDPMACTL.exe
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
SAAZOD/SAAZDefaultJobExe.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
SAAZOD/SAAZDefaultJobExe.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
SAAZOD/SAAZJobDownload.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
SAAZOD/SAAZJobDownload.exe
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
SAAZOD/SAAZKill.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
SAAZOD/SAAZKill.exe
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
SAAZOD/SAAZRemoteSupport.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
SAAZOD/SAAZRemoteSupport.exe
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
SAAZOD/SAAZScheduler.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
SAAZOD/SAAZScheduler.exe
Resource
win11-20260130-en
Malware Config
Targets
-
- Target SAAZOD/AgntUninstallPID.exe
- Size 106KB
- SHA256 bed5837b8b7b8cd801457f6c16860afa6101ce6e615baf8986d8c55745f84a5f
- MD5 bece49b8f2d0b4aca63c51ee7790b1c9
- SHA1 f9b0e3ba7efb8c5ceb9a173768b985b4eaff5082
- SHA512 7f32ac6d34bb10d0b3e3df553df2cadb455154793a8823f6dde08f191e436095e31234c40a9598e6bbd2345629300214e4712bcf00f7e27b52c02b088d1ced1e
- SSDEEP 1536:ERr+XhY+7l8MpyBhFtUYaVC6cd4hHFOR71LSZSgSvEIdmXHXst78i:ERr+Xh57vyBcc4hHERpuggb8mXmT
- TLSH T1DEB3A523BAA0244AF2A24A716EB590597E77BD315970EC5BB240BF8D1531983F4F032F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/BaseComponents/Asset/SmartDisk.dll
- Size 190KB
- SHA256 b7da89ec8c85ed8c3d481a74e62f2a61a0fdc9c236bdf7f37c5c10ca13e4c9f1
- MD5 93e032c7f77b36968540f3a70f2c1918
- SHA1 1019c1409c33568f2c323031ef0cc33c17a1919f
- SHA512 720b60c3d87cdd9239e3b22fa9bea2e3042b9c7d702f29d65e1ff31b073905dbff808f9acbdb2845f6d7bfa6c06088efe9612a2e037a5b72867598f7fe98d4a2
- SSDEEP 3072:8CaMjMXjAUJd2uZFdT6IAsXD/vydCCC0O1fd5SNahltoL7Jq0b:8CngXjAUXBXD/EFO9SNaqLbb
- TLSH T1CD14AF593882C27BD41B023C55E28B329BBD65032BD1D2C7F7CC4ED65B581C06EBA1EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/BaseComponents/Asset/SysInfo.dll
- Size 1.2MB
- SHA256 b622597bb57950b0a313ce640d8e2a63dd686b0ae13bda7245cdedf0fdf963f9
- MD5 43114dde1fb934dfeaac0e1c4586e652
- SHA1 9fca741ef661a6bf8a53a2f38b1000e51949d8de
- SHA512 d075855616e9b82d5cf8d65f57678d340ddde7bb32a6c6db9b36401fa0fcae5954ce3936d6fb840eb5a53dc1623fcb8cd4b28c82995863a44dd00fe10a9e09f4
- SSDEEP 6144:zOo2T/d9YONULFQ/q4eeKoNyzQqoOIwBgeVxfnSeksYpWOZfpzptHrQPhoZ:6fTNULFAeePyzTgOxPBYDP
- TLSH T1B655C521B3F9C122F0B236B85EFAD1A9987AB9716F31C4CB32C1575F147588164B9B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/BaseComponents/Asset/zAsset.exe
- Size 610KB
- SHA256 2ca5c05bcab2f1af48777f6db0867a1d51b33f88b53af59cb8744c814d7c798e
- MD5 948f58155d9c06ba23c23949c5488885
- SHA1 659994272ab395e671534c472b175bcd5db3bf45
- SHA512 689aed94083a0a05c8d504684369fd0aedc57249fffb62ec70d7132c0fbf56fda40a21aed2e208c351fd4caf053fb1185092c57787f3dae3d639dd9967add56e
- SSDEEP 12288:DXCNtnK2a3kR9h/sej/1CNVRloxm6fLZFQwkbzJ4XCBTjT4n+EPmuGpERqG5EOTw:DitDa3kRrWJK/etIgtXoaXyTVU
- TLSH T1F3D48217BB65740DF26389B0AEF5961A4C65BD32298DAC1BB3804F0926316D3ADF131F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/BaseComponents/Asset/zIsSmartEnabled.dll
- Size 86KB
- SHA256 ab4105ae766fe53385c6c769fcd64331aedcd7dae29ea13399161fe9282502ba
- MD5 71bf630ef712ed670963bd8c8d0338ad
- SHA1 7b45ada5a82ff211d5469d5943984e74202ac52a
- SHA512 d43936ed28ba86cdff4e270ff3bab3abe1176121b17f47784891825c8f542f83fa2610d343950716db15c030d1027c0c09801afb1c4615db0cbf60321f0cfaf9
- SSDEEP 1536:nHNWtnV8GQvo35qHi6nSEMZkJnzKX2JihL2z37kOK:HNCVew35qCnbJXMihL2z3k
- TLSH T1B5838E227190C075D4E76A345575CB625EBE78625AF4C0CB7FE802B95F603C0AB783AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/ChilkatCrypt2.dll
- Size 1.9MB
- SHA256 1fce5ab1eed126365b831b29152473ef111ce72ae6ba2759e1872c4c7eaf6b23
- MD5 906f9b793eb620ce8b2a61defbcd74bb
- SHA1 90300f86286e5977623ee989b6e5933dcc9d1453
- SHA512 40e45a41f023ac349c5ca84f0aa3901ae7aa98cacee68533ca3d6e7f3177387f150e44230f3293d50b257cf1ce489e89c41c380ca46da76ca0959f19908a5ecb
- SSDEEP 49152:YVo4hP6n/c86jJPw2a2miM3rcXuMgzhkGKuYg1R0kHNk0XcXxV+:YVNP6n/cr9PwjFXzK9kHNk0XSV+
- TLSH T1E8958E20D701C43AF4EB04B1896E476F7614A730175054D7F7C86EAE66F7AE23A32A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/ChilkatXml.dll
- Size 1014KB
- SHA256 48764da7e2b92e482debd9a52b0b2bc8886b88fa7f89bd6cb8f0a7370cbaf695
- MD5 94f8cbf9cd923366c006904e3fafaec1
- SHA1 3b02df09ec91ec9bcad0683b236c817be1225b35
- SHA512 f5e9045e89f393a2a58f06effd312151d4fda7dd360d6f0f667921466d763071b779fa902c2c73138bbd7ced6384384a3b5984952224520b84c0d8c238523826
- SSDEEP 12288:1p/yY+jzTrHNM1gBW3ddI3xIduM4RlxtI5XIdCevN9SC8qSM/X4w0MyrgG2WuSqu:1SC1gBdEubT5vNQBtFL2W3+u+zyR
- TLSH T1F025BF11B4E680B9EA0E0730046DEB3DD9789BC84F259FD767A4FF9DB9321C1A536209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/ChilkatZip2.dll
- Size 1.6MB
- SHA256 7ab09322f31618d18d765cd88903e1457eb83612f6d42e7d24b09444f138065b
- MD5 d9d20faeacd7a2f2dffd17e6e4676840
- SHA1 aa4f9d01c0c7edd9547dab5d9d68b9e2f7bce14c
- SHA512 67abce708b05883e0879f9d691db6f69417f08675e65d6dbba96f8bad6819135e2c7903b13726c707eff624bd49c0a947ec87943b3fa46dda9eadcf812e5a314
- SSDEEP 24576:5FORxSi2WvchUgWXX3dMHj/skSG0mR7erlL6gjh+ub:5FOfSi2WvchUgaX3+Hj/xI6gUy
- TLSH T10275AF10E701D53AF4AB05B1CE7E862D6A18A630175450C7B3CC6FAE6AF76E23E31647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/ClearLogs.exe
- Size 46KB
- SHA256 0ef6d3a7981b364f3ee7423b979919250f4470616b185bd39f1ade6fe7303530
- MD5 0d01e2dfc2aad4e34ead54327a7301ea
- SHA1 c11ace9711286de7fc7332b33866ed6aa7e90a79
- SHA512 46ac0b70065fafc7d4a4f771f5ef094da5092596ac2038b88b1eb38bc1045196781e4ac7f6c3f7d9bc71bd3c656d703a7430e47085490e835207d31611ec70fd
- SSDEEP 768:xbbek8hsn+4hrxQr/Ge1vl85nihAnYiFvbd5ALJV:xbTn+4CeeQNihi7ViV
- TLSH T14F231813FB941826E082CAF22D65D209AD667D711DA0EF9B7A467F0E09307C364F472B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/DMPHelpDesk.exe
- Size 182KB
- SHA256 05bd7113b979aaaca313eca50710c99bb82d9c39ffbc8dfde22d6a9d243dcbdb
- MD5 2005a8a7560ea8a17c549184ba4f526d
- SHA1 ae2e1d4559b53d50f85585d17bbfb03eeafe3884
- SHA512 d151d29e225fd7bb51c00dc87bf9baf82ccc6e9a1674efd5b8e1282a56202a5e60bf005670cd791d8196a8894992281c2f7235a66803bb1ecfd127afc53cff12
- SSDEEP 3072:8Ymwd/XYGpesB6aovLBvSQiPHO6dqkF1MisF+QMXj7xYadd:3fYGpe/VxifO6dqEKio+n7
- TLSH T14C046B34B690D8B3E4560034A7B8DB72EA7DAC31573690C3F3980FB95EA41E2477964B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/SAAZDPMACTL.exe
- Size 111KB
- SHA256 655c481dc05f5537aeec5d345215f73a071ff6292184a03051c5d93e1490d8ea
- MD5 5c14d3a8809a419eb36432dcafd4e9dc
- SHA1 ae12598d30c7c94cd1606b2814999b9e84f50fa4
- SHA512 c1b31ce868799e625e6d6f52301a48849a6fe3b770c7dc0db32df98e8070d294038442b102ada0d869a876ad400559960c64ad9ccd7566f4370f07a4fe291941
- SSDEEP 1536:Pj+PeVC0c8CI+QSYg9QxCXIEEpxn4YaBn08FkZ2SiPos+DYlgAGO7ni:6GVkI+QSDbIL+YsbPolDYtm
- TLSH T1B2B37C2172E0C032E497153158A4DBB25D7FB8724B7950C7B3A843BA5FA07E066BD3A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/SAAZDefaultJobExe.exe
- Size 154KB
- SHA256 ca4100868aba772beb364773e7d530f175c1ad6bea3ed3997d90fe1ef56148be
- MD5 a1a5f2bd08d87a7f6f0ae4ee5aa18efb
- SHA1 592921f3a3437fab7c66b9199a9c730849f43b45
- SHA512 22eed3f133a8088f2eb90b14008b5f9e85a023bf92fa1334e6882314ada0a7d0af1ed6eaacf0b959a6be387916c900ddd7eb78c2ff77851eabb44f805595c6a2
- SSDEEP 1536:Hb6V/n91heFzFYwZsg6iIJLTKc5V+Ri7NcIPxKtCfEy57A:H+92FGOf3VhEc8gtC8ak
- TLSH T1D3F3AE13F9E1C4B1F55A44713AE49F7B9B7A7E34162298C3E344DA460F30AD2872A2D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/SAAZJobDownload.exe
- Size 98KB
- SHA256 0ef1dd127d448b982b2021255140a9a40e92ed8edcab249bec8b6a5df37be04b
- MD5 b9cc894682f48a535198da38088b60ce
- SHA1 ea60165647f92adf0eda1b0a50e15618210c6fbf
- SHA512 c671e9236b8141202c3e1520dbc2b163f73d96426baef686674649a1a7d0b970741f1b1e8a6dc26c9307ceabc9803f805ce0350bb86b91dc7459220e7fa6b21d
- SSDEEP 1536:E2NH1p+sHJJr6owyyZUSJYYIbtTZPlLaAuXFHoRAQH7wl:EmH1p+spJr6HuAYffgNFHoRAQH8l
- TLSH T14BA38E23B8E18471F695843139B49FBFAB7EB93519214CC3B35CDA1A1E316C1462E2DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/SAAZKill.exe
- Size 50KB
- SHA256 1a4d115b0a39e69dbb40c63deeff760c9dfb9261921c6a5537b71730616bd986
- MD5 1bb590432e3815ac719f60499c46eba9
- SHA1 f383708c888adaa43ced5585446ffbec9abfc020
- SHA512 b5639ef906b5c467e130db98ef814d90e3dc00a5d596d3ece1fabc252789cfc5785f86e9674c6ce87330f25f2482470432cb0d549dd5b4a027dd326387d18c7b
- SSDEEP 384:67ra7+owxC8nAPhxwr5Pt+yg2Ze99R+0WtBfMIYi4z8jl+rSTELxy8RbmL4nNyJQ:yaaowYZ2j+6Yjw0WtBfdYiFu6O5AL0
- TLSH T1F2337D6359D40827DC468A70A4F48A23AE3F37131F60C0D7E384955A6F607D67E3E7AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/SAAZRemoteSupport.exe
- Size 82KB
- SHA256 644e303c3d7eb2db9e1c045cb936aacf3edfe314fdcb77510ae31d9e04ecfe2d
- MD5 d3a4d5b1db4942f61f03eee0aacbaee9
- SHA1 9e2ec7681231873f890753d77869c38261b49d3a
- SHA512 f0157c8a7d3fa9e240af6e37ca591c51b11c6a73fdb25bea837969024cd98920459ad3a1854183175d80c5223e761d823494a9f089841e68df95763715bad243
- SSDEEP 1536:v5RtHNmjlbL9lGQLPX4wn365Ej153kDcWYEU7/:RbtEln733/0DBUD
- TLSH T120838D23F8E1C072C8A2957418A59B27A73FF81007B6D8C33758539A9B657C25E3E317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SAAZOD/SAAZScheduler.exe
- Size 86KB
- SHA256 cbadc2f5150cbb2a7b24a06aa9edd94ad9892ad6f5f1e467dd3e27ac8f16c2bd
- MD5 5e90b927b766a6f9906e0084c0570ac9
- SHA1 304ab6d00e2b46f205e7b4682a95ea0414ee329d
- SHA512 65ba73233ec7481a5e98e4492e41a97f7fd8d47c7498ec069eb5716f1f481862af92477c4215a543cfe46084593c1411dd07fb76bd8242b226c289a6776fb3f6
- SSDEEP 1536:kycmsvKa4Xneifictas9wJRv9XavViYg37GtfDvWxI7xf:YFiQgsbTok8FDvSIB
- TLSH T1B6838D23B491D472C456857119EC8F66AB3BBC110B6189C33798569F9FB23D28E3E353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10