General
- Target azura.exe
- Size 48.5MB
- Sample260711-vbx3ysfv3k
- SHA256 e60f1ead5aff04625789898c320e44a9325a8cffa3302568e8aba6dbccac25c5
- MD5 f643e5386bb18b798e653a8ccbd8b1d4
- SHA1 806b77168d036a68df7f25f64fc872f6e52ed70e
- SHA512 15c47e6d996d834c68d4a18ba5f92b07f640d16c585959d47425a4dbca9df86f5e2ef107f2e7a4a6a6307ede3fdb6319c1bd6fcd986167af3c76658acc3a1838
- SSDEEP 786432:djqleQFKIX1T39wm+MPOIfBs2bmm0GvTOjSAh3DmnZRr2C3uTuflXsiJHJ+i4RX4:d8eWKI939l1OxWmvIObuzr0COww
- TLSH T147B7337CE042F5B4EDB2F9F1F2D4F8A0C49A29261692EA49964C4708463D336FBD425F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
azura.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
azura.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target azura.exe
- Size 48.5MB
- SHA256 e60f1ead5aff04625789898c320e44a9325a8cffa3302568e8aba6dbccac25c5
- MD5 f643e5386bb18b798e653a8ccbd8b1d4
- SHA1 806b77168d036a68df7f25f64fc872f6e52ed70e
- SHA512 15c47e6d996d834c68d4a18ba5f92b07f640d16c585959d47425a4dbca9df86f5e2ef107f2e7a4a6a6307ede3fdb6319c1bd6fcd986167af3c76658acc3a1838
- SSDEEP 786432:djqleQFKIX1T39wm+MPOIfBs2bmm0GvTOjSAh3DmnZRr2C3uTuflXsiJHJ+i4RX4:d8eWKI939l1OxWmvIObuzr0COww
- TLSH T147B7337CE042F5B4EDB2F9F1F2D4F8A0C49A29261692EA49964C4708463D336FBD425F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger