General
- Target azura.exe
- Size 51.3MB
- Sample260716-tpzy2acz2v
- SHA256 4ec06416b8d88678b95460002841310d73bf791ccf803e7276d6855af8a89349
- MD5 281cc072b4f4dad91f78abbfc9cb966e
- SHA1 7491a3d501c6f778be211c10b86ea01a6cbca492
- SHA512 ffc06ee1e44ae8a9f7ffb741bc7e3efa81b717a44ac3e41bd2c3169463c048ede7a5430c75f93c84c0467c7e9830c4a26fc33e1684b1249aa2d2879db7d6993b
- SSDEEP 786432:Yxf3x54Z0IaHFFiCoaO1+cfjd2Le22SxiMhWMJqHukxZ8tGzFrSNQeMIHcQA/t8:mfB54L2nd3cfQLIShMuQzFro5cQA/t8
- TLSH T1DBC73310610444C8DCD8BA37C0BF2C99D6510CFCA26DC66988ABF7D6D6F205F76A78E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
azura.exe
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
azura.exe
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target azura.exe
- Size 51.3MB
- SHA256 4ec06416b8d88678b95460002841310d73bf791ccf803e7276d6855af8a89349
- MD5 281cc072b4f4dad91f78abbfc9cb966e
- SHA1 7491a3d501c6f778be211c10b86ea01a6cbca492
- SHA512 ffc06ee1e44ae8a9f7ffb741bc7e3efa81b717a44ac3e41bd2c3169463c048ede7a5430c75f93c84c0467c7e9830c4a26fc33e1684b1249aa2d2879db7d6993b
- SSDEEP 786432:Yxf3x54Z0IaHFFiCoaO1+cfjd2Le22SxiMhWMJqHukxZ8tGzFrSNQeMIHcQA/t8:mfB54L2nd3cfQLIShMuQzFro5cQA/t8
- TLSH T1DBC73310610444C8DCD8BA37C0BF2C99D6510CFCA26DC66988ABF7D6D6F205F76A78E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger