General
- Target azahar-windows-msvc-2125.1.2-installer.exe
- Size 29.5MB
- Sample260707-qwp6maa15z
- SHA256 860340711ffcc4a7421f473944f2496a132a0d982fb53ada6ebbae7e2c935b5d
Malware Config
Targets
-
- Target azahar-windows-msvc-2125.1.2-installer.exe
- Size 29.5MB
- SHA256 860340711ffcc4a7421f473944f2496a132a0d982fb53ada6ebbae7e2c935b5d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
Score3/10 -
- Target Qt6Concurrent.dll
- Size 35KB
- SHA256 f41bd61b718649d862e436932069daad124d4ba0e25d322ed66a19204206b349
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6Core.dll
- Size 9.6MB
- SHA256 b6c6bedca4e798f9a6cfae20946688ab0a0c3dbd7de605951b0ffb7b679e4f53
Score1/10 -
- Target Qt6Gui.dll
- Size 9.1MB
- SHA256 569f50c8fde5e3841197e4f44bc4673b330e2f8744391f36f0dccc17fc858f03
Score1/10 -
- Target Qt6Multimedia.dll
- Size 1.1MB
- SHA256 65d136af4e5f64a3e5b6ba2136df6d2aa12dd8b39b7143514bebc34f33cba007
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6Network.dll
- Size 1.7MB
- SHA256 dcd4d0951de4f8a7d8609dd2f44cb32cc7fd507c7562b635346df2de6707374b
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Qt6Svg.dll
- Size 593KB
- SHA256 da0da4afa90789bf7f7dcc61f745308b3e02af7afb74269fc2b1ac771b1f93a3
Score1/10 -
- Target Qt6Widgets.dll
- Size 6.2MB
- SHA256 36cfd5321d60623047f51bc9ce34333e1d090aca7a23b45e6c8a79f92d6a1aa6
Score1/10 -
- Target avcodec-61.dll
- Size 13.2MB
- SHA256 19d56a440d67ec235537e390d317fe638ef46bec7767b3f2acdc6718bd7f7aa4
Score1/10 -
- Target avformat-61.dll
- Size 2.5MB
- SHA256 86db77fb25e28fa4e05f4c2d8aa0276f5a317aacd8c698c05c215056443d2af5
Score1/10 -
- Target avutil-59.dll
- Size 1.1MB
- SHA256 409fa6353998394bede5af9dd046ad2a9680cb8f0b43997cbc72039233375463
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target azahar-room.exe
- Size 2.3MB
- SHA256 4538d09b4b73250cb00640906f82cfc0d88b74ac6053890ccd4cff5d53a4e5c4
Score1/10 -
- Target azahar.exe
- Size 30.6MB
- SHA256 24243bf8e4e4a93e1b4a3712238514f518e4918c3627787cca2ba706081da2a7
Score1/10 -
- Target dxcompiler.dll
- Size 13.7MB
- SHA256 b855ee494c60a5dd0638d4574bc4d728c87fac5d415b9be3122058b5adefda77
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.