Overview
overview
8Static
static
3AzraielLox....2.exe
windows10-2004-x64
7AzraielLox....2.exe
windows11-ltsc_2024-x64
8$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
8$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
8$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
4$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1LICENSE.electron.txt
windows10-2004-x64
1LICENSE.electron.txt
windows11-ltsc_2024-x64
1chrome_100...nt.pak
windows10-2004-x64
3chrome_100...nt.pak
windows11-ltsc_2024-x64
4chrome_200...nt.pak
windows10-2004-x64
3chrome_200...nt.pak
windows11-ltsc_2024-x64
3icudtl.dat
windows10-2004-x64
3icudtl.dat
windows11-ltsc_2024-x64
3locales/af.pak
windows10-2004-x64
3locales/af.pak
windows11-ltsc_2024-x64
3locales/am.pak
windows10-2004-x64
3locales/am.pak
windows11-ltsc_2024-x64
3locales/ar.pak
windows10-2004-x64
3locales/ar.pak
windows11-ltsc_2024-x64
3locales/bg.pak
windows10-2004-x64
3locales/bg.pak
windows11-ltsc_2024-x64
3locales/bn.pak
windows10-2004-x64
3locales/bn.pak
windows11-ltsc_2024-x64
3locales/ca.pak
windows10-2004-x64
3locales/ca.pak
windows11-ltsc_2024-x64
4Analysis
- max time kernel
598s - max time network
455s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/06/2026, 22:25
Static task
static1
Behavioral task
behavioral1
Sample
AzraielLox-Premium-Setup-1.0.2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
AzraielLox-Premium-Setup-1.0.2.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral13
Sample
LICENSE.electron.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
LICENSE.electron.txt
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral15
Sample
chrome_100_percent.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
chrome_100_percent.pak
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral17
Sample
chrome_200_percent.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
chrome_200_percent.pak
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
icudtl.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
icudtl.dat
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral21
Sample
locales/af.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
locales/af.pak
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral23
Sample
locales/am.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
locales/am.pak
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral25
Sample
locales/ar.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
locales/ar.pak
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral27
Sample
locales/bg.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
locales/bg.pak
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral29
Sample
locales/bn.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
locales/bn.pak
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral31
Sample
locales/ca.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
locales/ca.pak
Resource
win11ltsc2024-20260618-en
General
- Target $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- Sample260624-2b89jsf16l
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 2636 wrote to memory of 4424 2636 rundll32.exe 86
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\SpiderBanner.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2636 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\SpiderBanner.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:4424
-