32377565fff2cba35c80bfca6b2c19eaaf26511f7fa36cdf92685574e2fe7b39

Sharing

Copy URL Twitter E-mail

General

Target
azahar-windows-msys2-2125.1.3-installer.exe
Size 39.3MB
Sample260724-ecm2dasaqb
SHA256 32377565fff2cba35c80bfca6b2c19eaaf26511f7fa36cdf92685574e2fe7b39
MD5 3cf089f4a85942b763e5c3169be6d97f
SHA1 176cb816f3b019cc4cfd3e432fcdc1703278b589
SHA512 b11cfafd3b99a3705056b8ab73e5ad0883c3efe61cd83b193feca4394362c53672ff9650423cf13ec9e60618dfe157134678b134de8b468436719f7cf961ef99
SSDEEP 786432:5X7mWVowjs67EFsXMHBcKT0Q1+X3UxFEAWbL4DBtKimiwKl:50wj7xMKK+XkxFjf9Aimihl
TLSH
T1659733898E5001C7ECD31A77E010DAF124629D581EE6A64E35E93EFF3B396163934E87
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  azahar-windows-msys2-2125.1.3-installer.exe
- Size 39.3MB
- SHA256 32377565fff2cba35c80bfca6b2c19eaaf26511f7fa36cdf92685574e2fe7b39
- MD5 3cf089f4a85942b763e5c3169be6d97f
- SHA1 176cb816f3b019cc4cfd3e432fcdc1703278b589
- SHA512 b11cfafd3b99a3705056b8ab73e5ad0883c3efe61cd83b193feca4394362c53672ff9650423cf13ec9e60618dfe157134678b134de8b468436719f7cf961ef99
- SSDEEP 786432:5X7mWVowjs67EFsXMHBcKT0Q1+X3UxFEAWbL4DBtKimiwKl:50wj7xMKK+XkxFjf9Aimihl
- TLSH
  T1659733898E5001C7ECD31A77E010DAF124629D581EE6A64E35E93EFF3B396163934E87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
- MD5 4b8a750993567ac9a350ba9768fabfa0
- SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
- SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
- SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
- TLSH
  T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
- MD5 e6f30908abfc6f53b7c3c36daec4586d
- SHA1 a9ce4ceb9121c0f4375010438359f564f77506e3
- SHA512 0161f510d894d7a85c7cc160ef1cbb694cd30580ffe537f82096f4ce966cf3f6a9fec4929dd93ba2b133eb23a0230e53969792ad647c3b0f5f2e5517d9970a09
- TLSH
  T1A78173BB92E00CF3D0A44BB780A71CE362B5DD301752001F4A478AA92590B67EE7EB15
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  Qt6Concurrent.dll
- Size 31KB
- SHA256 d3e06a5012c780d0bbfc6fad848ac444c5c921af082f1f4af84bb5ded5d74ff2
- MD5 a0739a05aa973f787f73dcd59a437ce6
- SHA1 60e724e91d203aea0be9e10993127866b3a7338e
- SHA512 1e1a1d1aecf05e9ef20adaf63ce61e13d88d896077ecc8d982e4eb0ed331f5cfce1a95aad7a9f4896148e92ef96dbef3cce9648043a23a45dde139c7b7993765
- SSDEEP 384:Dl3Io4u2uFVlp++Uxl/Cna7tcfq1UB3PtDGcFy7Y:J3Iozs+UWnYtB1UjD7M
- TLSH
  T1C5E2E9A11F5D499FD8C2EBB5C4E702BA35B7F9011B2B86DF0580963C1E6BBE44631B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Qt6Core.dll
- Size 7.4MB
- SHA256 e570e239af6abdea1e930dfb3c0d568c1ae3f87c34a4b02fd213284219050b34
- MD5 1a20685496d844497fabfb94f24d09d7
- SHA1 3de58f39611d6c52e349b5770c896562a6e005fd
- SHA512 ba9d045f9900e83c059f3a731b562b636dec3ce42e9238da60bb6f08dcad03b6cc40a603764f5f66b00815462e3800c4f6a31d0017b82ed7de97e8b91002da02
- SSDEEP 98304:92vaQD+nXtWLRX8FNF2uMcZdVKFdu9CwJsv6tb09WIsiWvGlNWP0EKXgXCFlW7/:9kGxyuM+KFdu9CwJsv6to9
- TLSH
  T1C4764B42B28691A9F46DD334DAC72322F9327C828B3669EB47849B356D67BD4173F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Qt6Gui.dll
- Size 10.4MB
- SHA256 af7db34e128100d485a1bc49f28a4704186a40552bf3ee8d0fe7863e9c7e392a
- MD5 2f060b0fb92670c5a962e3884a20db85
- SHA1 8938c7a2a1084365a0a9647e25e3262f6495789b
- SHA512 f859504dff9fbb38a772ff9671700109407c72f1946511d58cc71ec030543c6bbc997633e45a949720fbb0ed2edf0c4430029473f507fb8c4439d8e6efa76a61
- SSDEEP 196608:XPv1+wasi5GUXf7KfMBVSYtkpCycEv60/4h:XPt+wasi5GUXf7KfMBVSYtkpCyjvQ
- TLSH
  T1F8B65B42B64295ADE41AD6349AC76323F9317C454B76A9EB43808B393FB3BD0273E705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Qt6Multimedia.dll
- Size 1.9MB
- SHA256 69518a967178a4676009adf2095a979358a79b8697d4f0ee3cb740786d49f6b3
- MD5 96ee72f232c7db5c10a05f3796124e4f
- SHA1 d39e1455a2cc72d39720e63e28e780544c7ddabd
- SHA512 48f7164b7a4501aa613bc0e90c3193db3e076a173877569144f20041f19595ab7b8ea3042c071521f7da4ab5cc66a98d960ced2195a650b54cd592534cd48ae9
- SSDEEP 24576:01+6P9HHa7tlHLq5hz9CQzqv2/bu/D1OZ9+iN6G+fl1RyUj0d:0o6hY+5V/bu/Do3N6nRyUj0d
- TLSH
  T168956B52B6419A9FDC9AE379E8C74322BA30B8514B3399DB5380867B6F67BC1173D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Qt6Network.dll
- Size 2.3MB
- SHA256 900ff1b0cd76d698321e40f27da96c618275493588bfd76148067a227f26548b
- MD5 90421c7e353160555fc672db3e456c01
- SHA1 39d211789369b0148628288e89ea4779804c3dab
- SHA512 6cba6712d27ebd41d398f5a1f4a069ad2c2350b89462b812d9aebdd8a2dd10bf03e873e0bc7ccd45f86b0d758dbce03260007a8989abf01590ea074cd8d10f9e
- SSDEEP 24576:2ujxoGjyNlIQgmsu5lZaobxC45iR43ZuR2SE1CqZd/W/aZq47S5qxk6bjb:Hjxbj+lH575mECTkZukS6ZdOYFxksjb
- TLSH
  T120B54A42B64195AEE85DD634DA876327F83578418B3AE5FB8780877A3E97BE0133D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Qt6Widgets.dll
- Size 8.2MB
- SHA256 d3a62cfeb078b83cbb0e02d7ac68e572eb341be904fcee46ec901b4853c8fb38
- MD5 80af5899eacd1e69169b9032669c5dbf
- SHA1 ea56aae61e7dc17497a65523f7640c981fd147b3
- SHA512 80b181f6c9f748b67fe8e0855294423a5257b60fccdb195ad4118a5ebc2f2e4ced4c6f245444fe191d9b82dfa042893fb2f533cc84046da24902cc86f98982b0
- SSDEEP 98304:RP/X3bcKBKUUg1bslOlmgokr+9/ufei0oypiZCXHTyo3fBB7c1fL:JARUUmYcG8ZCXz9vBBm
- TLSH
  T1F8863A42B24295ADD85ADA38CEC75323F93178858B37A9EF468047393EA77E0173E705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  avcodec-62.dll
- Size 17.6MB
- SHA256 f86d23a1e3eaf90070a9649f471e6ebf6d65047258bf6228ce5f32923e091f45
- MD5 09f6a2bf9ccde2b54e37d3b339723684
- SHA1 2a220d5cac6782a9d30090c88a367d10e5c07cb8
- SHA512 4e7fc7cf08c73dbe0036e6259ea9cba55babac922bae310a259d24d414fb35d1a2bf3cdc40acccc5fdc72ef0792fee2008de45dc9d235d3df35d3c4b21ef2f4b
- SSDEEP 393216:bppsY/tug+twiVmRoyvBHgdUuuGZ6MwAX2Ql:VKBup46Mj
- TLSH
  T1A007AE4FF19350E8C50BC57082ABAB33FA3434AD85157CB727A496347EB6BC06A59F48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  avformat-62.dll
- Size 2.7MB
- SHA256 75e63a657617b461a934d94df4e53381e9c30a7bf9683cc921bc4062286649ab
- MD5 617debb990cc2f6b824533a2fa4d4bbc
- SHA1 8efc21d584fbbd3d55ae22a6acd1a12d65944763
- SHA512 c1778504b6506f6fd02ca718872a3e04dc56c55d6d182dc742412ee272dfbd4a4ddcdd0b8bc98c37ad35d4a93e55ec70cd724c80d940a913c2fc56a77ba7dcad
- SSDEEP 49152:3h/K1RYSP37PcZWEmmtWG8yuZf6WJ28XAJ6nKmgTARQ:w1V4J8bzRKmgTARQ
- TLSH
  T1BAD56A03E18215EDC55AC275478B6722BA35B4490B32BEFF1664C7392F65FE0672EB08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  avutil-60.dll
- Size 1.1MB
- SHA256 96b18a7b0a6ba3914c68ba2f203a5b45ac7817233a3868ebd3b3429843f04ded
- MD5 9e08793b90635f47a741af5c583102a7
- SHA1 6815017fd5c7cbe205b372ec843700bbf237fcd1
- SHA512 32d5d859d7b1df0d72f3f14af6907c6212f1b3768f5741d439a876173ac3e584f737fa0fe87b1422d884c8a425f01919fa9f7e70e2b656ca75091e1ac5e4faca
- SSDEEP 24576:Xs//rRNRXBih9a8OtJk/Xm61N/LBMMy657WnFz:Xs5XUh9a8O7om8pL7570Fz
- TLSH
  T1B8457D02E5C2556EC447C270869B2A06F2767046DB66BDAF22918A343F34BD07D6FF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  azahar-room.exe
- Size 3.7MB
- SHA256 f9de0dd7fb587fcde661e7a1c9583bc4813a822fa3ae24eceaa13e93c3d69724
- MD5 e77821517ee268421e0a3fe84febdd10
- SHA1 12b4a182694a1fcd565ea2ca5ee958e1481751fb
- SHA512 4f7dbcabfb33307da8bd59c8654c58c0dc401e2f149350c097f5aefd2c5bb72dcd3f2ad6d902d3351dc871f671c0681e2a255a87cd3cec021271f68bf1bb1271
- SSDEEP 49152:qt0C9J4zpsrVCR8Pp1Jdo3+ay/XZC8ip2lXIsX+cZllJEdHa4OJ3DVwf975pbx7R:qX9Jyy1zo3WXZz9SHaCf975XiO
- TLSH
  T134065C47E28580DDC45AC17443076222FA70BC995731BEDF1694A7312F7AAE46F3EB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  azahar.exe
- Size 34.3MB
- SHA256 86e255cff8da9438c6abc6f3c90a004092427831b47aa11400a1739c1cfaa120
- MD5 66ab7c8eaa9f03ba53ad9b71b7ee7af1
- SHA1 d8b1c2edf30abc21220b5f2f3bec15d7265d1b38
- SHA512 ec8c950a2a50d8917c73b9ef512ecf94cb1916ea52dcff5d42ee8566b4bb30408cd354e9b1b333d81df902fc3c2a6be399451a413c5507886433870bfdf31c26
- SSDEEP 393216:qVxE8uXq7sgA4B/9hg/dlEHFwoxjlQrM:q/uAsgAmg/LErlQr
- TLSH
  T180878E47F28295CDE81EC1B5C6476325FE327CAA4B207ADB199067602F78BD06F3DA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  libb2-1.dll
- Size 44KB
- SHA256 7fd416e76828a2b99efca3d6c3eeab22b1cd2c51df74d813699cc68dd670277f
- MD5 d40e19a18ca24168cc6baa179f806b94
- SHA1 438dbe02c84159829b4bedcc5ad223d479469311
- SHA512 5b998f2376e8d835da5354693cf4104a39adc6fbcfc010ea16d49e440fcc35a4cb7f0f37dcc6022695fb7dc9e0fd94ba17fbb2c3f61784082a1749573ee1008d
- SSDEEP 768:6JxIcq7eZ0LM7PdqLVAGVEjc/4GdDtH7/14dcgb:Yycq7eR7PdUKLF4T1Acgb
- TLSH
  T14F13F942B2C26A5EC419D2B8D78B7BB7F436F0558B32A1D747849D700E61FD02B7BA09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  libbrotlicommon.dll
- Size 141KB
- SHA256 2c21a9ea0c965904b58c37237fd4e33a4cf90c5b6320b0f7e17f3d5304bba985
- MD5 a7976c4bdc2f0fc6f4edc4090e963433
- SHA1 9ffc2bdb29891ddd2b25dacd76cbdd0444e9fb42
- SHA512 969a416cfe94b454679bd97f2aedcee73784a748e5a670028bbc39baa0f63124a18277ec75656df8aea97334857b681d1a5781ebe0e4caf8d48eb55a0911981a
- SSDEEP 3072:uc4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBdBgup:P4AhdNorGvHdbi09GJ7Bgu
- TLSH
  T1D8E36A61B305073BC61B627AE4966BB9F33581B4936305D3A4A9026D24C3DE4873F7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  libbrotlidec.dll
- Size 60KB
- SHA256 53be248c41da8fc7ffc9223b9b7825a0a6e825910769cec9faf88e3cbb791183
- MD5 877c8e3bdc5217539fc6b261655e3546
- SHA1 8f992b9a0be6bbd50ad2af622c1355f76bb3f5fb
- SHA512 eec4fc8e05bbd78a9021fa386b4f3e881e87e8ce8e4f1de4412a0baf0b511c1b03ead80f286b6650efd8b13559a542b6ae9d898d18e44438643603c1bb08d228
- SSDEEP 768:zwh7gkSiK7i8d7D3thHMe6GX+TN+xtvzFGSUS9MSgH4jT4yazQxARbYs3YF/vsrP:kh1K7Zd74en1ZGG9M8Qu/vsHnG9SXDp
- TLSH
  T125534C0276862D5EDC42C23893A36737B57ABC415727D5E362A0F5312E237F06AB935C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  libbz2-1.dll
- Size 96KB
- SHA256 22289ed41efbe633f798047de836b31170336e5e40e7e7b586c915bdbda7fcd9
- MD5 b843434a8eae82adea4f9eaa2fbffe47
- SHA1 b34aaa305cfc1a4936a88592b5689b0c978ffaa4
- SHA512 9f7c152c3b7ef52c0b3131d865960f8529bfe43776bfcf00c668fc41258e4ba4fcecb09888a99f77634534b42202d57e71806b808d9efe9ca6125712b8db7570
- SSDEEP 1536:XbxAQ+Ny/Nl+cBvnbHGFQAa0NkQZm4BZkd38pR/yjr/wRFULiQW8TbOJ:LOQd+cBvnNA1FZk2U1TbA
- TLSH
  T175A32926F0D25AEEC856963491AB473BF9387498070165F3EA60E7301F71FE05E38B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  libc++.dll
- Size 1.6MB
- SHA256 8a9deaac6d2f4d2de468a544d1f35cd0dd4bcde03cda3cfb76fb9674749828d4
- MD5 9b98f030712242522b2f1c4b1d05c38d
- SHA1 4e06684207ace6683e7a64d35531d291adb9cfc2
- SHA512 5177b795f5a221e66ea4db5b8a19f41035d64f0a7d4eed668cab0fbe0af21f2f2d269855254802d8569be27a23e2651c25bacf91b945e48b0eae009a13215a73
- SSDEEP 24576:pnw5KpILY6ROpzvpd+M8xpshSMXl2huR7lWSLuYz/aLZ7QlOBXDR6pPugRwhb:pnOmpzvpdYMaRbDRsG
- TLSH
  T131755B1383E2C95AC8DEBB7892C7272BF334BD1017F659DB5A5483241EA23D6963DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  libdouble-conversion.dll
- Size 76KB
- SHA256 9557a00cac2ca28afde918e617e9474300637ab04971b6c3c09d2935212a922f
- MD5 aaec4aefad3c16e8849268dab6cff6bf
- SHA1 6d3d22c877562cc84f65d83d0a69797549de84e8
- SHA512 9027e167eafbb90fb58bee41f96d772aad68c97b7fd7df8d37906904e8e63622259deee1fd63cddd02b20646c7941f4fc2fd96d94aaf1415fa83a0131cc4a38b
- SSDEEP 1536:BdiikPUdS1cYvnf+NplGRlQf3UJo97oHaBXp:B8MAcGYtWHaBZ
- TLSH
  T1AD735D47A38264AEC003A23882569775FB36F806076ACFF756A0D9301D63BD45B3DF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  libfreetype-6.dll
- Size 824KB
- SHA256 fee9b0490e5217611436a4686fd75f341ce5e8c531cdf127fbdf3ecd9226f929
- MD5 c372d05b98bbe5f30b343db8570dcbe1
- SHA1 4597dc9f9ca0a898cf098ce1321ab0959e5015c5
- SHA512 c123e5f4896ef108005be8870ef956359f367381db0327ac3056713b26748451275706c888dfc78fb027941cef1d1577ad82a3be93581516f413589cc1665683
- SSDEEP 24576:eg4kmM4rdQ1A5oGHe8IezeeeeeeeeeeefeeeemeeeeeeeeeeeeeeeeeeeeeeeeeR:yrdQ1qpIezeeeeeeeeeeefeeeemeeeec
- TLSH
  T1FB058E43E68765EDC91BD33453576733FA35B4011226ADEB52A08B313E66FD06B2CB28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  libglib-2.0-0.dll
- Size 1.6MB
- SHA256 b6af12b5380f3199d4d5ad0cfa08d35cf89b39da401591f50142e5952645c1eb
- MD5 23b41865715599f97702eec1041193b2
- SHA1 8b53c0790407e17f7769f04bc9c64748b9c2ab36
- SHA512 f1d5add0cdf7ef9d9f38bded2ded518096b8a17cc864266a0cbae736f7de6425d5007e7bd5090765f7a76ebb34dbe6b323f652bc18247b2acb3c251ca412bfbc
- SSDEEP 49152:H4RkH3Le5FzEQagPBZ9GSatvSunpC8rmOs:H4OKbVJZz3unpC8g
- TLSH
  T130852A03A242769BE787DE3585E2A762F134B4500F3368AB2E5CD6342D7DBD3162AF05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  libgraphite2.dll
- Size 148KB
- SHA256 40401e99734dc7f7887dbf7859d499d72c6bf1ff2a9ee4a94cc7d535e42ecf91
- MD5 8799229802d6ececc4e45c91ea1b08ce
- SHA1 73212b6bcfda3eeba5e6cba51986c3b49310d51c
- SHA512 c8eb960406b2974e65ef85bbf0ac74d9595555678975c43749468d246938945297bc6d6a8bbc23537000d1d68c3040d6cec63c0b01fae55441733bc41bb46354
- SSDEEP 3072:FZWjxqXj4mIK2f5GwTtYX1Y+d8g7tmjYzAHT2:FCqX8H3f5ptkt8g7tEYzA
- TLSH
  T1A9E34B42B24AA4EDC15DE27495C7A727F939F806473769EF8390C2342E75BC05A3AF24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  libharfbuzz-0.dll
- Size 1.4MB
- SHA256 dc0aa91c58c711630235896aa5306dcf14ebe62f49578b7b4881c7e547941c1c
- MD5 7b3eba83a9f7e30fc31cf671e2399201
- SHA1 66f28df7ef47a3ae9bf1d73dc65a36eb4770bfcd
- SHA512 c694beb23db0a6e7fcba20060f8b4bb65ee4cd95758ba5edb4b14d3cde8dbb1fee1ead9e0ee6c9cfb1734ef6cba81e1c702979d97010e2dff149c85bbd055f28
- SSDEEP 24576:2sAlxmUR1jiS54s3k1fp+lLOSz4y4QJwed:2sjXfp+lLOSNJw+
- TLSH
  T12B659D43F146849DC01AE33481875723F57578424765ACFF87A88335AAD2EF06ABEF1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  libiconv-2.dll
- Size 1.1MB
- SHA256 c9f9b9addeac620eeccb6a23fc5a423fa1244e18431c00e1219db00d479ea332
- MD5 4bd9a069e2b520540ef9a565bc508458
- SHA1 93524ac737807cb5f58fc26ccb5ae38c54a91eca
- SHA512 aead3732efd4e5e659a5f1b16bd3bca5fbd5ccfb747bf3098a06527f2efe60397cf5a7013ad1a1517f3f6665dfd65d9aa856e44d8cf46ae1db64ea45aa6728ba
- SSDEEP 24576:Sl1DfrNfzGavkg3NyElQKuqsbbTujvKYw0BAUZLYwcB:sZLGaXDQKuqVjCx0BAUZLYwk
- TLSH
  T1C335DF51F3C3CB27F523C6B089BB6B26E53BEC216B0646273664B3AC8D367E405C4656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  libicudt78.dll
- Size 31.6MB
- SHA256 08b3d33d5007368e91179d17ac0f29df5e288ce7813fcca982f993dc949655b3
- MD5 227d9eaeec393d0f71a2b7f69434ae6b
- SHA1 cbf6b8fe52dc6a77eb21aa9f0bc9bbdb11316179
- SHA512 af68a5b00a1e66c96fc57023fb8f444888e0eb5cce1b19e2d5cf901a8ed018c3c73e3c3b7ce63b61b44983e0e20bb8d0d2bd1a0aaffbe54712141408e0c973a6
- SSDEEP 393216:JLVBEdGiTBxFSsiXUx7WT0wWlF3I3Ul2noJg9WbkxyfS/CO47Ty9tf0PsKSoKnzm:zmdG7e
- TLSH
  T1F177084262FB09C1FDFB9F32A8F652634577FD067E31844E52042B2B5D732A09A67722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  libicuin78.dll
- Size 3.6MB
- SHA256 90c08c6133cc4a79aeb37971d3dcccbc9c2a77bbee54c07ef6eef40de0e9ef61
- MD5 4e449c94e9c4160719ab565de56d5ce0
- SHA1 685d9d63716f1b80f3a2ea2fa4be3fb820a44588
- SHA512 58d186be416782e7f80a623ee057abb7b065066158cbb763f466f191def61eec4cc3ee7ac1afb09771e443016b98ed9a55eb595c76222b72145182a376931d36
- SSDEEP 49152:3FR52eYzpfHSEqU+EdaJ0btry6IMqM/K77fxh+glo0KgwS5I3QJEF7:3Vb3EqMKXfRw6IgJEF7
- TLSH
  T1FE061903E68185DEC46ED638C2833632B6343C7547266CBB562C8B38BF97E95669DF04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  libicuuc78.dll
- Size 2.0MB
- SHA256 e57ad30b09550f651affbc5ae55f103638641f6b7a89574b42aba389e809e26a
- MD5 20bec37c2058bd71e4fcbbef6fd74c83
- SHA1 359b664df22705b88755d0888a794d6893c2a88b
- SHA512 57ffaff8bc0172b18538ee5a4f0fc8adf2d4f3773516b12a80a01992228ddaebfbcb07f6016484facbf4b1934257a0e83418b7fd5521fe2c074ffe3e6daf017a
- SSDEEP 49152:W+SR+Kaz3kSC4X7Q9Ot3SoDmIuGL+DV8:W+g+lCiHClDV8
- TLSH
  T13BA53913F68394EDC06ED338C6B32736B2343C155B666CBF46588A34BD5ABC4069DB98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  libintl-8.dll
- Size 295KB
- SHA256 b648dfd190711371bedd58f36cf7bf80cc60be0ff78e574e57f3bd81135eeff5
- MD5 cd1bf2243a2cf281d002cc5b5f50ddc9
- SHA1 20d6dece4b8f83faf40f75701ff087b146b51734
- SHA512 a2569078336f6940702617d09025c037163cb03b79da9510e613dcf11017992c103ad2ffc9ee7d185a2d4a4ecad8f04a93092b9a99ff420dbff2581361882fba
- SSDEEP 6144:TkVqo3htm6gxJRDWj01YKec/1IB75NfRPNkpDrFVKQKrOreokVq7Y:TkVqom6yZj1FJWB75NpFkbUQKCfkVq7Y
- TLSH
  T1F9545B0B7511459DE8A2C2B1C583E3B67A77BC310F1257E736B0B32C6E36AE11B26761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  libmd4c.dll
- Size 83KB
- SHA256 71e7c8f7e24627ea1ca6d4837553eec071d9becd39cc0ea567e6b58b3d2f326c
- MD5 c978704cc2f4fea3d8ce5980d96370d8
- SHA1 334804d9655bc388f4390dbda1880d51827fffe5
- SHA512 173aa35cc67e986aa2288676cc6bdbad4da8b945218d1dbbbfb1ac732402c333b787fe56de91ca9d977d41cc7de666ab2c0a9ad33a23f86639ac2d02bd1a48b5
- SSDEEP 1536:ENJu6n5CetsVSyfeJ4IJidg0fE8/YctwOnxaukA9XD:ENJu6n5CekGeIJiO0f4ct7nxNkA9T
- TLSH
  T185831816E9D269EEC443D334C2DB8233F271BC9103239BE70711B5742E66B90AD783A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32