3e95fa7a50d2e3c85fe7a3d14e28c03b893b9179b0078db9be99f4f090b9c396

Sharing

Copy URL Twitter E-mail

General

Target
azahar-windows-msys2-2125.1.1-installer.exe
Size 39.3MB
Sample260428-ythb1aes6x
SHA256 3e95fa7a50d2e3c85fe7a3d14e28c03b893b9179b0078db9be99f4f090b9c396
MD5 c61996bcc367aec290dea46a99056847
SHA1 0748ffecb3ef42258b5ef98e08854e9c0789aa61
SHA512 ed54a24b6ee53244347c6dd393a4b70fa6a311c87b885e7a8eeef424bf4d1dab13c8735498b407b8ca59046f7dee646fd0d202f3965509c2547b4b73a42f03b1
SSDEEP 786432:5FgOQ671YVJ5WtuLdqrSDeU4A6xyxxSlfOQeQv9U34UfmRt:5FguYgzuDpbWRL1ULEt
TLSH
T1C69733D19E8128C6DA98973F651FDE7A84171D418AD0EAADA8D43FD336700B33A35C63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  azahar-windows-msys2-2125.1.1-installer.exe
- Size 39.3MB
- SHA256 3e95fa7a50d2e3c85fe7a3d14e28c03b893b9179b0078db9be99f4f090b9c396
- MD5 c61996bcc367aec290dea46a99056847
- SHA1 0748ffecb3ef42258b5ef98e08854e9c0789aa61
- SHA512 ed54a24b6ee53244347c6dd393a4b70fa6a311c87b885e7a8eeef424bf4d1dab13c8735498b407b8ca59046f7dee646fd0d202f3965509c2547b4b73a42f03b1
- SSDEEP 786432:5FgOQ671YVJ5WtuLdqrSDeU4A6xyxxSlfOQeQv9U34UfmRt:5FguYgzuDpbWRL1ULEt
- TLSH
  T1C69733D19E8128C6DA98973F651FDE7A84171D418AD0EAADA8D43FD336700B33A35C63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  libc++.dll
- Size 1.6MB
- SHA256 e9b42ee239faebdd0a576155e8bf6301960c3f37697470b6cd77dd8684ee2a20
- MD5 6e895292a981a46cad98c9d44990608a
- SHA1 063b9521ff976fb1f51af64f0797c86d1f9e330b
- SHA512 48f64a815242bf454384a1c9e13bd31617f97a4b6005ec52f7261df911f0d38d3d727df0213fc8ddf777bf9f7987ff36d6db9b02593834f3d7cca424217c581b
- SSDEEP 24576:7nw5KpILY6ROpzvpd+M8JpshSMXl2hGR7l+SLu0z/a9ZTklSBffB6pPuERAhL:7nOmpzvpdwYafbfBsm
- TLSH
  T134756C1383E2C95AC8CEBB7891C7272BF374BD1017F658DB5A5483241EA23E6963DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  libdouble-conversion.dll
- Size 76KB
- SHA256 9557a00cac2ca28afde918e617e9474300637ab04971b6c3c09d2935212a922f
- MD5 aaec4aefad3c16e8849268dab6cff6bf
- SHA1 6d3d22c877562cc84f65d83d0a69797549de84e8
- SHA512 9027e167eafbb90fb58bee41f96d772aad68c97b7fd7df8d37906904e8e63622259deee1fd63cddd02b20646c7941f4fc2fd96d94aaf1415fa83a0131cc4a38b
- SSDEEP 1536:BdiikPUdS1cYvnf+NplGRlQf3UJo97oHaBXp:B8MAcGYtWHaBZ
- TLSH
  T1AD735D47A38264AEC003A23882569775FB36F806076ACFF756A0D9301D63BD45B3DF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  libfreetype-6.dll
- Size 824KB
- SHA256 fee9b0490e5217611436a4686fd75f341ce5e8c531cdf127fbdf3ecd9226f929
- MD5 c372d05b98bbe5f30b343db8570dcbe1
- SHA1 4597dc9f9ca0a898cf098ce1321ab0959e5015c5
- SHA512 c123e5f4896ef108005be8870ef956359f367381db0327ac3056713b26748451275706c888dfc78fb027941cef1d1577ad82a3be93581516f413589cc1665683
- SSDEEP 24576:eg4kmM4rdQ1A5oGHe8IezeeeeeeeeeeefeeeemeeeeeeeeeeeeeeeeeeeeeeeeeR:yrdQ1qpIezeeeeeeeeeeefeeeemeeeec
- TLSH
  T1FB058E43E68765EDC91BD33453576733FA35B4011226ADEB52A08B313E66FD06B2CB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  libglib-2.0-0.dll
- Size 1.6MB
- SHA256 25815fe53925f4e01860bbd834a12f5aa13865382c4156570f64cf47c6fbfc47
- MD5 a5766c4c8692f2fe4abc5489651aa5a0
- SHA1 01631a90c5438b7a7e0c971f81692b06eae74cc1
- SHA512 ea11a07aaa5336cda46eabcdc67b4ae8e76d4c21a03d329ebd8266967b62d2e660948c7c71f6e06ce9bcfa21c77a785b0614c33d19446e346e8637ea87fdc927
- SSDEEP 24576:VqgNJoNYkNFHUYIv7jBBZDnGItxuuBNtv/kl6YJKlnpykjQ8rmOZy:V6YkwFBBZDGSuatvMinpC8rmOs
- TLSH
  T116852A03A14276ABE787DE3585E2A362F574B4500F3368AB2E5CC6342D7DBD3162AF05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  libgraphite2.dll
- Size 149KB
- SHA256 51ad68c31e706d4d9181cf3f15df259e5962644f664a3723d6ca48f0ef4fb8c4
- MD5 c8dfe47f78c491446d7b1c39449d82be
- SHA1 218fab832b78f14072be0d2f9d7d9775bba24323
- SHA512 39ea8978571db1c5b1c89134e53d799932092f5102e0390aaa28cebde3ce1049e92287db49ed9cc2b57e4662a464e17bf945b221a496ea90bad52b882e86d903
- SSDEEP 3072:dZgCQBHA1F/+q/xNjjSLUOCsv7S314txH6ANc12:dZYBAhxNx4tMAN
- TLSH
  T1E7E34C46B24A68ADC519D37591C7A727F539F80947336CEF83A082342EB5BD01E3AF25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  libharfbuzz-0.dll
- Size 1.5MB
- SHA256 f2d70d952cad02c2476327c006fed701d244e944f18543d152ff2550051dce81
- MD5 fc8d8c4569076dfc6384b403439ea505
- SHA1 711ed780dab686190676de72c2719d27793ecb56
- SHA512 31f27e2fe6b43e46b372fc4a440b1059b520d24d3fed39d65d027a9a2a91858bcac3a36c4a4e6eeaa0d94b6ed25e5f2adf163dc8290dcd17435ab253a67018cf
- SSDEEP 24576:GdvlGSjWszIcs0FI/pubQmZBEiVBPBkjq8eRAwwed:Gd0rV0mhwXEiVBP223uww+
- TLSH
  T1EA759D43E14680DDD01EE23491875723F5757802476998FF87A08739AAD2EF06BBEF1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  libiconv-2.dll
- Size 1.1MB
- SHA256 c9f9b9addeac620eeccb6a23fc5a423fa1244e18431c00e1219db00d479ea332
- MD5 4bd9a069e2b520540ef9a565bc508458
- SHA1 93524ac737807cb5f58fc26ccb5ae38c54a91eca
- SHA512 aead3732efd4e5e659a5f1b16bd3bca5fbd5ccfb747bf3098a06527f2efe60397cf5a7013ad1a1517f3f6665dfd65d9aa856e44d8cf46ae1db64ea45aa6728ba
- SSDEEP 24576:Sl1DfrNfzGavkg3NyElQKuqsbbTujvKYw0BAUZLYwcB:sZLGaXDQKuqVjCx0BAUZLYwk
- TLSH
  T1C335DF51F3C3CB27F523C6B089BB6B26E53BEC216B0646273664B3AC8D367E405C4656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  libicudt78.dll
- Size 31.6MB
- SHA256 f49f18226881d741d3f5cfc166fd80f2f5da21d322c76bda2da6c9bb6a45991e
- MD5 cdbbbc80e0bf0bbdd40e6a5230b1c9b4
- SHA1 935e37d7cb19c6c201699448b9163de254792ec5
- SHA512 d55d709c47d142f16e3797071e5e7f67cae4b3e5f0d6111046bcead597d0707800b64ea597395243ccf3547a3fade6589fba4082d7f5309dc82082c7cc52c412
- SSDEEP 393216:GLVBEdGiTBxFSsiXUx7WT0wWlF3I3Ul2noJg9WbkxyfS/CO47Ty9tf0PsKSoKnzm:AmdG7e
- TLSH
  T15877084262FB09C1FDFB9F32A8F652634577FD067E31844E52042B2B5D732A09A67722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  libicuin78.dll
- Size 3.6MB
- SHA256 7f55171111e3183cde2c48adcef9844dd505321496fe3f38d20d5201506e6def
- MD5 11faa79624cc59dd553436b18fada759
- SHA1 dc087dc9427729717218380a6e9a31b8b6693f02
- SHA512 cb83b1a461a19d5765c46c8d3cf8efdcff03341729d6faa13ee133ec0bb0c2ba4c57fccdb46b80c7cfd6cadb10aa95d736048658cf1a166e907ad4ab1fdb5605
- SSDEEP 49152:06Ri/B6EZ9r8+Mgl9AqJ9r4bD8qFxsHRG0ird2u0kquRwAgZKEF7:0j8j+MMRfmRRgZKEF7
- TLSH
  T112062903AA8185DEC46EDA38C2437532B6343C7557266CBB462C8B3DBF97E95269DF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  libicuuc78.dll
- Size 2.0MB
- SHA256 69b68e82e3a7f33d7b621c4abe1800f002cfa9c05205b90f65d535bb322d8c0e
- MD5 72747ee42415f64ab34850955519cde8
- SHA1 1e500cb8b8716c181baf2c630c4d6c39a939bd38
- SHA512 46b686b4083f6bb267ccbcf1d877e8604d61aa5efe9ce6f5425a6969d60ff651b6aa77f34b12b3c9b31a9b0bd9cc540922b3a1d24e518f570db2ff9956bba4e5
- SSDEEP 24576:B9w6V6WUjaUYsHV5YQRza+nX+XtMwciUqYS/4UudLhPV6zrPuGL+DV8dRdJ:M6sXjaVuTZruXtVcifYSZzrPuGL+DV8
- TLSH
  T178A53913F68394BDC06ED338C2B32736B2343C155B666CBF46588A34BD5ABD4069DB98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  libintl-8.dll
- Size 295KB
- SHA256 b648dfd190711371bedd58f36cf7bf80cc60be0ff78e574e57f3bd81135eeff5
- MD5 cd1bf2243a2cf281d002cc5b5f50ddc9
- SHA1 20d6dece4b8f83faf40f75701ff087b146b51734
- SHA512 a2569078336f6940702617d09025c037163cb03b79da9510e613dcf11017992c103ad2ffc9ee7d185a2d4a4ecad8f04a93092b9a99ff420dbff2581361882fba
- SSDEEP 6144:TkVqo3htm6gxJRDWj01YKec/1IB75NfRPNkpDrFVKQKrOreokVq7Y:TkVqom6yZj1FJWB75NpFkbUQKCfkVq7Y
- TLSH
  T1F9545B0B7511459DE8A2C2B1C583E3B67A77BC310F1257E736B0B32C6E36AE11B26761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  libmd4c.dll
- Size 86KB
- SHA256 c227e1585cc5454aa59273e97201b5a0db937755bbf399c44d97151ce0df7230
- MD5 b98d89bbf672b2cb438c43da944d7b87
- SHA1 279c7c8c892ddc65dbe666747c01083b8dc77d2a
- SHA512 b90c54e4a1fdc9274d681e3b5e41a176b28417ee1f5f59a80a2c65f21d475bcb944423c08dab71d1ff4ea58eb087c851f310efb3da10620f3db3464475d86c49
- SSDEEP 1536:os/aKjjfnRHhMBND+thXYf85tXdbMx6OdaB+Zy8mLf:os/vbnFhs+thIf85ddbMDdu+Zy8mD
- TLSH
  T1F7832A67E5A669EEC5138375D6961323F330BC465B2287E707A0B2380E717E0ED38769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  libpcre2-16-0.dll
- Size 694KB
- SHA256 5241746e2f6aa7ed6b8c00074e5610a0b6571efc5c8ae8df92eb2ba54b2b4bf6
- MD5 5edb35db48773d9e09fae150071ea214
- SHA1 5bd1f0e2031324e5d3c18a6228b3e54929ec4abe
- SHA512 da2cfc743f06211c575b646a9c14f3a2ace2a61b96e9fb7658bbec61e16ad8689330e90a38a330c361227ee98a117205d2d59c543409993680467e535ef19828
- SSDEEP 12288:lQamD6NMSWiYvwFiKev1RTaHIm+5uvC1B2iVJ8ImB8UoO:lnmD6NMSWiYCi1Wk2iVWImB8UoO
- TLSH
  T1BBE4D707EAF3006ECD96C274D2277265FD7938C8132ABD8653E4C7753623E602AB965C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  libpcre2-8-0.dll
- Size 761KB
- SHA256 611c92cb36a9983426c290a4a2e7b77cac9c4ca785c95eff82a92f7a44432709
- MD5 20e26ba3c412bc4ce94e02f41b6a7e08
- SHA1 bbf15d593e589f447e99dad74d4ea21f1e78cd08
- SHA512 fc5f0d1abf85058f776a0c317e05ffdd385bc74a1cb0ea0436b32b6dbb278a9cfaf65bbd18bf05cfabc8cf5b318c115b3019733e485143ae008e100ed70e464f
- SSDEEP 12288:xgJbPP2u34g2cOjQiwOpoHTaHIE2xiTh4IcalMqWIF8F1AB8Uod:xgJbPP2uVOjPajyeIc2jqF1AB8Uod
- TLSH
  T1C9F4D707DAF7009DDD96C274D26771A6E93538D8032BBD9643A8C7313B23A602BAD75C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  libpng16-16.dll
- Size 260KB
- SHA256 ceecd14b5ff88105d21435a7c091e8634d3fc81498dfd2a005c2b1d4e14b5d15
- MD5 a9a5738f216357528d7b9b8e1db6d141
- SHA1 54a731078af5a02160b81572bcc49172e84b5e1b
- SHA512 54bee5f156198341eb829594072e0f82318430936c515b712d2fc64186a3678f84ba9f95bf830493a3368b2e0c83f86b324471372862b888ff1a0f802890fe78
- SSDEEP 6144:YudGwk8hN0gbAOs7JQqr9r4C8rtXZTpsq:zh0ODs79r9r4DrTpsq
- TLSH
  T1BE447C83D1915CADC447D3789257B232F17AB4101732EDFB0694C630BA62BE4BA3AB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32