General
- Target Azyre 1.0.5.exe
- Size 5.4MB
- Sample260802-arnt1a1ana
- SHA256 e3c0e6759cd784a5eed274ce83e4c9154f4044e1e73c9c46719223f756b4e1a9
- MD5 52c7768837c308da75e18b3d1f1d651a
- SHA1 e760a3d0b70bf4970490318de65aabdd495653cb
- SHA512 79d83002571436453f576c2f2cd673bae9900baed7b2efb5d297a1f395cf77a7627073c4391bb6e8193f7f513dc8febc4077311bdf7bd40444f68390a74d344c
- SSDEEP 98304:8AgdGWhPDwZOE12lfVUmuXNSfNIspQL16yDstX7/lC0SpJs+mq:8mW2ZP0+XNSfNIzL0yDs1lNUJsa
- TLSH T1554612787BE98C07D46E5F77D6740A214677F7432742A31B2A8C803E1866F8CC6A1FA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Azyre 1.0.5.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Azyre 1.0.5.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Azyre 1.0.5.exe
- Size 5.4MB
- SHA256 e3c0e6759cd784a5eed274ce83e4c9154f4044e1e73c9c46719223f756b4e1a9
- MD5 52c7768837c308da75e18b3d1f1d651a
- SHA1 e760a3d0b70bf4970490318de65aabdd495653cb
- SHA512 79d83002571436453f576c2f2cd673bae9900baed7b2efb5d297a1f395cf77a7627073c4391bb6e8193f7f513dc8febc4077311bdf7bd40444f68390a74d344c
- SSDEEP 98304:8AgdGWhPDwZOE12lfVUmuXNSfNIspQL16yDstX7/lC0SpJs+mq:8mW2ZP0+XNSfNIzL0yDs1lNUJsa
- TLSH T1554612787BE98C07D46E5F77D6740A214677F7432742A31B2A8C803E1866F8CC6A1FA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.