f23b0b363d0a83b69171b93f66f2590e620b819291828a7fe8f9009a24c8ddb0

Sharing

Copy URL Twitter E-mail

General

Target
azahar-windows-msys2-2126.0-installer.exe
Size 41.1MB
Sample260819-pscwfsbj7y
SHA256 f23b0b363d0a83b69171b93f66f2590e620b819291828a7fe8f9009a24c8ddb0
MD5 f254994a86b67f1858d9f8608f471912
SHA1 9fecd8ef2086ead6b744877ab45eb0964cfbeb06
SHA512 5fdfd33818e0adda54ce1863c1fec8d819722f9b103873cd4fd0972515cd5dddcf2f555f6cf990ea4be33836bda724293193723c9633b1dbd238926353fe7b31
SSDEEP 786432:5RMEQFNZv6tfsM8h+1wsjgiAgSSQ350R9CJmCPyyKWDJRP3hbmA2x2en:5SpJvIf3M4w0giA9i/CJmCKyNDTP31OJ
TLSH
T1E89733088E409571FFD61BB75B89F8B40F4ACE528D46AA4C45CA3DD7B6B364A0E35C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  azahar-windows-msys2-2126.0-installer.exe
- Size 41.1MB
- SHA256 f23b0b363d0a83b69171b93f66f2590e620b819291828a7fe8f9009a24c8ddb0
- MD5 f254994a86b67f1858d9f8608f471912
- SHA1 9fecd8ef2086ead6b744877ab45eb0964cfbeb06
- SHA512 5fdfd33818e0adda54ce1863c1fec8d819722f9b103873cd4fd0972515cd5dddcf2f555f6cf990ea4be33836bda724293193723c9633b1dbd238926353fe7b31
- SSDEEP 786432:5RMEQFNZv6tfsM8h+1wsjgiAgSSQ350R9CJmCPyyKWDJRP3hbmA2x2en:5SpJvIf3M4w0giA9i/CJmCKyNDTP31OJ
- TLSH
  T1E89733088E409571FFD61BB75B89F8B40F4ACE528D46AA4C45CA3DD7B6B364A0E35C0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
- MD5 4b8a750993567ac9a350ba9768fabfa0
- SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
- SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
- SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
- TLSH
  T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
- MD5 e6f30908abfc6f53b7c3c36daec4586d
- SHA1 a9ce4ceb9121c0f4375010438359f564f77506e3
- SHA512 0161f510d894d7a85c7cc160ef1cbb694cd30580ffe537f82096f4ce966cf3f6a9fec4929dd93ba2b133eb23a0230e53969792ad647c3b0f5f2e5517d9970a09
- TLSH
  T1A78173BB92E00CF3D0A44BB780A71CE362B5DD301752001F4A478AA92590B67EE7EB15
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Qt6Concurrent.dll
- Size 31KB
- SHA256 d3e06a5012c780d0bbfc6fad848ac444c5c921af082f1f4af84bb5ded5d74ff2
- MD5 a0739a05aa973f787f73dcd59a437ce6
- SHA1 60e724e91d203aea0be9e10993127866b3a7338e
- SHA512 1e1a1d1aecf05e9ef20adaf63ce61e13d88d896077ecc8d982e4eb0ed331f5cfce1a95aad7a9f4896148e92ef96dbef3cce9648043a23a45dde139c7b7993765
- SSDEEP 384:Dl3Io4u2uFVlp++Uxl/Cna7tcfq1UB3PtDGcFy7Y:J3Iozs+UWnYtB1UjD7M
- TLSH
  T1C5E2E9A11F5D499FD8C2EBB5C4E702BA35B7F9011B2B86DF0580963C1E6BBE44631B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Qt6Core.dll
- Size 7.4MB
- SHA256 e570e239af6abdea1e930dfb3c0d568c1ae3f87c34a4b02fd213284219050b34
- MD5 1a20685496d844497fabfb94f24d09d7
- SHA1 3de58f39611d6c52e349b5770c896562a6e005fd
- SHA512 ba9d045f9900e83c059f3a731b562b636dec3ce42e9238da60bb6f08dcad03b6cc40a603764f5f66b00815462e3800c4f6a31d0017b82ed7de97e8b91002da02
- SSDEEP 98304:92vaQD+nXtWLRX8FNF2uMcZdVKFdu9CwJsv6tb09WIsiWvGlNWP0EKXgXCFlW7/:9kGxyuM+KFdu9CwJsv6to9
- TLSH
  T1C4764B42B28691A9F46DD334DAC72322F9327C828B3669EB47849B356D67BD4173F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Qt6Gui.dll
- Size 10.4MB
- SHA256 af7db34e128100d485a1bc49f28a4704186a40552bf3ee8d0fe7863e9c7e392a
- MD5 2f060b0fb92670c5a962e3884a20db85
- SHA1 8938c7a2a1084365a0a9647e25e3262f6495789b
- SHA512 f859504dff9fbb38a772ff9671700109407c72f1946511d58cc71ec030543c6bbc997633e45a949720fbb0ed2edf0c4430029473f507fb8c4439d8e6efa76a61
- SSDEEP 196608:XPv1+wasi5GUXf7KfMBVSYtkpCycEv60/4h:XPt+wasi5GUXf7KfMBVSYtkpCyjvQ
- TLSH
  T1F8B65B42B64295ADE41AD6349AC76323F9317C454B76A9EB43808B393FB3BD0273E705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Qt6Multimedia.dll
- Size 1.9MB
- SHA256 69518a967178a4676009adf2095a979358a79b8697d4f0ee3cb740786d49f6b3
- MD5 96ee72f232c7db5c10a05f3796124e4f
- SHA1 d39e1455a2cc72d39720e63e28e780544c7ddabd
- SHA512 48f7164b7a4501aa613bc0e90c3193db3e076a173877569144f20041f19595ab7b8ea3042c071521f7da4ab5cc66a98d960ced2195a650b54cd592534cd48ae9
- SSDEEP 24576:01+6P9HHa7tlHLq5hz9CQzqv2/bu/D1OZ9+iN6G+fl1RyUj0d:0o6hY+5V/bu/Do3N6nRyUj0d
- TLSH
  T168956B52B6419A9FDC9AE379E8C74322BA30B8514B3399DB5380867B6F67BC1173D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Qt6Network.dll
- Size 2.3MB
- SHA256 900ff1b0cd76d698321e40f27da96c618275493588bfd76148067a227f26548b
- MD5 90421c7e353160555fc672db3e456c01
- SHA1 39d211789369b0148628288e89ea4779804c3dab
- SHA512 6cba6712d27ebd41d398f5a1f4a069ad2c2350b89462b812d9aebdd8a2dd10bf03e873e0bc7ccd45f86b0d758dbce03260007a8989abf01590ea074cd8d10f9e
- SSDEEP 24576:2ujxoGjyNlIQgmsu5lZaobxC45iR43ZuR2SE1CqZd/W/aZq47S5qxk6bjb:Hjxbj+lH575mECTkZukS6ZdOYFxksjb
- TLSH
  T120B54A42B64195AEE85DD634DA876327F83578418B3AE5FB8780877A3E97BE0133D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Qt6Widgets.dll
- Size 8.2MB
- SHA256 d3a62cfeb078b83cbb0e02d7ac68e572eb341be904fcee46ec901b4853c8fb38
- MD5 80af5899eacd1e69169b9032669c5dbf
- SHA1 ea56aae61e7dc17497a65523f7640c981fd147b3
- SHA512 80b181f6c9f748b67fe8e0855294423a5257b60fccdb195ad4118a5ebc2f2e4ced4c6f245444fe191d9b82dfa042893fb2f533cc84046da24902cc86f98982b0
- SSDEEP 98304:RP/X3bcKBKUUg1bslOlmgokr+9/ufei0oypiZCXHTyo3fBB7c1fL:JARUUmYcG8ZCXz9vBBm
- TLSH
  T1F8863A42B24295ADD85ADA38CEC75323F93178858B37A9EF468047393EA77E0173E705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  avcodec-62.dll
- Size 17.6MB
- SHA256 c605a8f7108e37a2e858095d61c248f39d7689f1eac36081f3226e6bc752f201
- MD5 262bf195b9b7c7ca1704b6d764d8e424
- SHA1 5f047d55a4112d2836610c7cc8b1ea87293f2c59
- SHA512 5196756ee9d473d047ab62c34df97db049963c84913abda500c01862bab07478d8bf3aa6ed97a5d30233ec3b754219c43896368d9d002f20b018b3208aff74f7
- SSDEEP 393216:zF8Akug+AnisYB3m/7P/u35qlKtSxhs2aD:pKLLKSM
- TLSH
  T17707AE4FF19350E8C50BC57082ABAB33F63434AD86157CB727A496347EB6BC06A59F48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  avformat-62.dll
- Size 2.7MB
- SHA256 690875e06b82eb685eb4823ba34d71dfec5cb0e0ee67e785c2f5f7586f534e05
- MD5 0bc1a9ca54e220c87339331ded7705cc
- SHA1 82f9bc309e718e15266a78fd61adc4153812d725
- SHA512 4b992b0662c9afeb4b9772b63d1938166ab6e1e43a034291bd408a5e09e2d6e5d6527dbb62306bdfd91b96373f09e5d7b8775d3c4b8427e6d21243deccc74dd5
- SSDEEP 49152:4LKNc+OIBXImpSYh/7rwTpWcg4mYMFBem1pegXAR:2SCG7EVepogXAR
- TLSH
  T18DD57B03E18225EDC55AC275478B6722BA35B4490B31BAFF1664C7392F65FE0673EB08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  avutil-60.dll
- Size 1.1MB
- SHA256 14089266f1598b4e20f3b5652a663428ecccc498e6dd6167b0957b7332210e48
- MD5 57d8932d7d73ddb5aa87ee1d619d4005
- SHA1 53a6bc30a7a46032c1c3b24d3e109b7a3703cd81
- SHA512 93010e95a1474608098e39e3c17b61af7357f222f3c86eb861f95cbb4acf416b8d9a7572e3a30dbc220c333e0b1ac24d22b427cb73706018a345f9d9e59bcc63
- SSDEEP 24576:dRK/rR2v8ogHDKxv5K1Ig66O8/HnzJai5VWnFE:dR/87HDKxvIV6zOH35V0FE
- TLSH
  T1BA457D06E5C2556EC447C270869B2A06F2767046DB62BEAF23918A342F34BD07D6FF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  azahar-room.exe
- Size 4.4MB
- SHA256 45e1ffc09e877e37b25eea41d89275b0c74044c901e505453a38741c82da229a
- MD5 bd6b5551ab87c8170386f6c4f1e4b156
- SHA1 6c3dab9439bf2f4a90e7cc86fab0c3187c2609ae
- SHA512 6892f21282567fbab5912e5847347793b36bcd4c6f74386fc0e03c62f654bfe63a248a356fc24563ac285fcc4ddb2c392401320d4c5fad27da3dc860b69dbbb5
- SSDEEP 49152:27IJKlFR03NIC5K829MmGCvdndZuvdjvQ3E0Gpkio9plP1fJ2o3/khbJmtvnOyWV:UlISGC1nd+vQ3Y+3/kFyW/0u72Ja
- TLSH
  T181268C57E28590EDC46AC1744347A322FA70BC954720BEDF1290A7312E75AE46F7EF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32