Overview
overview
7Static
static
3azahar-win...er.exe
windows10-2004-x64
7azahar-win...er.exe
windows11-21h2-x64
7libc++.dll
windows10-2004-x64
1libc++.dll
windows11-21h2-x64
1libdouble-...on.dll
windows10-2004-x64
1libdouble-...on.dll
windows11-21h2-x64
1libfreetype-6.dll
windows10-2004-x64
1libfreetype-6.dll
windows11-21h2-x64
1libglib-2.0-0.dll
windows10-2004-x64
1libglib-2.0-0.dll
windows11-21h2-x64
1libgraphite2.dll
windows10-2004-x64
1libgraphite2.dll
windows11-21h2-x64
1libharfbuzz-0.dll
windows10-2004-x64
1libharfbuzz-0.dll
windows11-21h2-x64
1libiconv-2.dll
windows10-2004-x64
1libiconv-2.dll
windows11-21h2-x64
1libicudt78.dll
windows10-2004-x64
1libicudt78.dll
windows11-21h2-x64
1libicuin78.dll
windows10-2004-x64
1libicuin78.dll
windows11-21h2-x64
1libicuuc78.dll
windows10-2004-x64
1libicuuc78.dll
windows11-21h2-x64
1libintl-8.dll
windows10-2004-x64
1libintl-8.dll
windows11-21h2-x64
1libmd4c.dll
windows10-2004-x64
1libmd4c.dll
windows11-21h2-x64
1libpcre2-16-0.dll
windows10-2004-x64
1libpcre2-16-0.dll
windows11-21h2-x64
1libpcre2-8-0.dll
windows10-2004-x64
1libpcre2-8-0.dll
windows11-21h2-x64
1libpng16-16.dll
windows10-2004-x64
1libpng16-16.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
118s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/04/2026, 20:04
Static task
static1
Behavioral task
behavioral1
Sample
azahar-windows-msys2-2125.1.1-installer.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
azahar-windows-msys2-2125.1.1-installer.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
libc++.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
libc++.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
libdouble-conversion.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
libdouble-conversion.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
libfreetype-6.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
libfreetype-6.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
libglib-2.0-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
libglib-2.0-0.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
libgraphite2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
libgraphite2.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
libharfbuzz-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
libharfbuzz-0.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
libiconv-2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
libiconv-2.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
libicudt78.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
libicudt78.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
libicuin78.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
libicuin78.dll
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
libicuuc78.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
libicuuc78.dll
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
libintl-8.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
libintl-8.dll
Resource
win11-20260130-en
Behavioral task
behavioral25
Sample
libmd4c.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
libmd4c.dll
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
libpcre2-16-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
libpcre2-16-0.dll
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
libpcre2-8-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
libpcre2-8-0.dll
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
libpng16-16.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
libpng16-16.dll
Resource
win11-20260130-en
General
- Target azahar-windows-msys2-2125.1.1-installer.exe
- Size 39.3MB
- Sample260428-ythb1aes6x
- SHA256 3e95fa7a50d2e3c85fe7a3d14e28c03b893b9179b0078db9be99f4f090b9c396
- MD5 c61996bcc367aec290dea46a99056847
- SHA1 0748ffecb3ef42258b5ef98e08854e9c0789aa61
- SHA512 ed54a24b6ee53244347c6dd393a4b70fa6a311c87b885e7a8eeef424bf4d1dab13c8735498b407b8ca59046f7dee646fd0d202f3965509c2547b4b73a42f03b1
- SSDEEP 786432:5FgOQ671YVJ5WtuLdqrSDeU4A6xyxxSlfOQeQv9U34UfmRt:5FguYgzuDpbWRL1ULEt
- TLSH T1C69733D19E8128C6DA98973F651FDE7A84171D418AD0EAADA8D43FD336700B33A35C63
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 3792 azahar-windows-msys2-2125.1.1-installer.exe 3792 azahar-windows-msys2-2125.1.1-installer.exe 3792 azahar-windows-msys2-2125.1.1-installer.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language azahar-windows-msys2-2125.1.1-installer.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsx3DE1.tmp\LangDLL.dll
- Size 5KB
- SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
- MD5 4b8a750993567ac9a350ba9768fabfa0
- SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
- SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
- SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
- TLSH T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3DE1.tmp\UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
- MD5 e6f30908abfc6f53b7c3c36daec4586d
- SHA1 a9ce4ceb9121c0f4375010438359f564f77506e3
- SHA512 0161f510d894d7a85c7cc160ef1cbb694cd30580ffe537f82096f4ce966cf3f6a9fec4929dd93ba2b133eb23a0230e53969792ad647c3b0f5f2e5517d9970a09
- TLSH T1A78173BB92E00CF3D0A44BB780A71CE362B5DD301752001F4A478AA92590B67EE7EB15
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsx3DE1.tmp\nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH