Overview

overview

8

Static

static

3

Azure.exe

windows11-21h2-x64

8

data/defau...38.dll

windows11-21h2-x64

1

data/defau..._4.dll

windows11-21h2-x64

1

data/defau...03.dll

windows11-21h2-x64

1

data/defau...50.dll

windows11-21h2-x64

1

data/icons...23.dll

windows11-21h2-x64

1

data/icons...45.dll

windows11-21h2-x64

1

data/icons/log_3.dll

windows11-21h2-x64

1

data/theme...12.dll

windows11-21h2-x64

1

data/theme..._8.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    AzureSetup.zip
  • Size 215.0MB
  • Sample260805-nsejlsae94
  • SHA256 e74f37560028fc6981222f69aedc1b370e095a416f4a1b4664710466bce7c45b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      Azure.exe
    • Size 100.7MB
    • SHA256 3246e682c5ebee6ba6e1061bbbdd03ddc7704331fab51afa1d68bc4b986dff63
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1
    • Target
      data/defaults/source_38.dll
    • Size 665KB
    • SHA256 f6fb7f66535add4f53bb82c78f26da829ca4a4087cb0e0d59eda47d2bfbf80df
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2
    • Target
      data/defaults/source_4.dll
    • Size 907KB
    • SHA256 934cbe9ed16656555b41a3f3a489626a5d37f38d270e5db7c0baff64a047a2ba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3
    • Target
      data/defaults/struct_103.dll
    • Size 589KB
    • SHA256 b2782fa28f8bb95dc9eef2ebeb70b87a6b35f619861c7cf873a9a5957f9fc0c4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4
    • Target
      data/defaults/struct_50.dll
    • Size 577KB
    • SHA256 26ee02173181855210730522ffc5b5bad2c45f8fc4e8f041ff3a1291e5851706
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5
    • Target
      data/icons/base_123.dll
    • Size 622KB
    • SHA256 51752444e4dc78a85b1922300a88bd2aabcf79abbcbcc576e6c0d9193574ca74
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral6
    • Target
      data/icons/info_45.dll
    • Size 711KB
    • SHA256 32da2f3ec0c0fe0611f8c3eb2a48f7b14b1b07a644c935bbb6aea0bfa3548215
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7
    • Target
      data/icons/log_3.dll
    • Size 995KB
    • SHA256 335e9320256e40729c5bd080e801bebd88903756bca3b2a14c98dcaa0905a5c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8
    • Target
      data/themes/resource_112.dll
    • Size 856KB
    • SHA256 da4933eaf624d6a59a849f04a6661913377deb641c6d6971d85d130788f4ea05
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral9
    • Target
      data/themes/resource_8.dll
    • Size 690KB
    • SHA256 dec7676514d8b95643854abe2c1ec8367a1cdef289c6baf985ab3fd0715bbd10
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10

MITRE ATT&CK Enterprise v16

Tasks