Overview
overview
3Static
static
1SAAZOD/Agn...ID.exe
windows10-2004-x64
3SAAZOD/Agn...ID.exe
windows11-21h2-x64
3SAAZOD/Bas...sk.dll
windows10-2004-x64
3SAAZOD/Bas...sk.dll
windows11-21h2-x64
3SAAZOD/Bas...fo.dll
windows10-2004-x64
3SAAZOD/Bas...fo.dll
windows11-21h2-x64
3SAAZOD/Bas...et.exe
windows10-2004-x64
3SAAZOD/Bas...et.exe
windows11-21h2-x64
3SAAZOD/Bas...ed.dll
windows10-2004-x64
3SAAZOD/Bas...ed.dll
windows11-21h2-x64
3SAAZOD/Chi...t2.dll
windows10-2004-x64
3SAAZOD/Chi...t2.dll
windows11-21h2-x64
3SAAZOD/ChilkatXml.dll
windows10-2004-x64
3SAAZOD/ChilkatXml.dll
windows11-21h2-x64
3SAAZOD/Chi...p2.dll
windows10-2004-x64
3SAAZOD/Chi...p2.dll
windows11-21h2-x64
3SAAZOD/ClearLogs.exe
windows10-2004-x64
3SAAZOD/ClearLogs.exe
windows11-21h2-x64
3SAAZOD/DMP...sk.exe
windows10-2004-x64
3SAAZOD/DMP...sk.exe
windows11-21h2-x64
3SAAZOD/SAA...TL.exe
windows10-2004-x64
3SAAZOD/SAA...TL.exe
windows11-21h2-x64
3SAAZOD/SAA...xe.exe
windows10-2004-x64
3SAAZOD/SAA...xe.exe
windows11-21h2-x64
3SAAZOD/SAA...ad.exe
windows10-2004-x64
3SAAZOD/SAA...ad.exe
windows11-21h2-x64
3SAAZOD/SAAZKill.exe
windows10-2004-x64
3SAAZOD/SAAZKill.exe
windows11-21h2-x64
3SAAZOD/SAA...rt.exe
windows10-2004-x64
3SAAZOD/SAA...rt.exe
windows11-21h2-x64
3SAAZOD/SAA...er.exe
windows10-2004-x64
3SAAZOD/SAA...er.exe
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/04/2026, 12:25
Static task
static1
Behavioral task
behavioral1
Sample
SAAZOD/AgntUninstallPID.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
SAAZOD/AgntUninstallPID.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
SAAZOD/BaseComponents/Asset/SmartDisk.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
SAAZOD/BaseComponents/Asset/SmartDisk.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
SAAZOD/BaseComponents/Asset/SysInfo.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
SAAZOD/BaseComponents/Asset/SysInfo.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
SAAZOD/BaseComponents/Asset/zAsset.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
SAAZOD/BaseComponents/Asset/zAsset.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
SAAZOD/BaseComponents/Asset/zIsSmartEnabled.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
SAAZOD/BaseComponents/Asset/zIsSmartEnabled.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
SAAZOD/ChilkatCrypt2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
SAAZOD/ChilkatCrypt2.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
SAAZOD/ChilkatXml.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
SAAZOD/ChilkatXml.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
SAAZOD/ChilkatZip2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
SAAZOD/ChilkatZip2.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
SAAZOD/ClearLogs.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
SAAZOD/ClearLogs.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
SAAZOD/DMPHelpDesk.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
SAAZOD/DMPHelpDesk.exe
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
SAAZOD/SAAZDPMACTL.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
SAAZOD/SAAZDPMACTL.exe
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
SAAZOD/SAAZDefaultJobExe.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
SAAZOD/SAAZDefaultJobExe.exe
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
SAAZOD/SAAZJobDownload.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
SAAZOD/SAAZJobDownload.exe
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
SAAZOD/SAAZKill.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
SAAZOD/SAAZKill.exe
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
SAAZOD/SAAZRemoteSupport.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
SAAZOD/SAAZRemoteSupport.exe
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
SAAZOD/SAAZScheduler.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
SAAZOD/SAAZScheduler.exe
Resource
win11-20260130-en
General
- Target SAAZOD/BaseComponents/Asset/zAsset.exe
- Size 610KB
- Sample260424-plnpdaat7p
- SHA256 2ca5c05bcab2f1af48777f6db0867a1d51b33f88b53af59cb8744c814d7c798e
- MD5 948f58155d9c06ba23c23949c5488885
- SHA1 659994272ab395e671534c472b175bcd5db3bf45
- SHA512 689aed94083a0a05c8d504684369fd0aedc57249fffb62ec70d7132c0fbf56fda40a21aed2e208c351fd4caf053fb1185092c57787f3dae3d639dd9967add56e
- SSDEEP 12288:DXCNtnK2a3kR9h/sej/1CNVRloxm6fLZFQwkbzJ4XCBTjT4n+EPmuGpERqG5EOTw:DitDa3kRrWJK/etIgtXoaXyTVU
- TLSH T1F3D48217BB65740DF26389B0AEF5961A4C65BD32298DAC1BB3804F0926316D3ADF131F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language zAsset.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4508 zAsset.exe