87da5b51d11976268ec8cd9cd0079b69ac265766a82e793ec731d5fa71b43da5

General

Target
azahar-windows-mxe-2126.1.2-installer.exe
Size 45.9MB
Sample261002-ka6zcsstct
SHA256 87da5b51d11976268ec8cd9cd0079b69ac265766a82e793ec731d5fa71b43da5
MD5 3a31a536e00bbda7c68efb883945ade7
SHA1 754fd1d89b020ea4abad29416ff6d8c100b2a86b
SHA512 39570d762e24a61444528412eb1ac7947e4f7559957511e6e55b93c94301203501b54f87a9bad383b485d1fa77981d2d983ee359021e1dcd54075324cf693cca
SSDEEP 786432:VJYJLfzT2rZY6GXdmTimawvru7vHC15IEHYt6jwl3/FGhhA2F/dk:VJgLSCXdGpvrem5EGwB/whhA2ddk
TLSH
T1CCB733A1DE106844DCAB4F332AE7F1F014985E09679CA62995CEFFD777312222637E90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  azahar-windows-mxe-2126.1.2-installer.exe
- Size 45.9MB
- SHA256 87da5b51d11976268ec8cd9cd0079b69ac265766a82e793ec731d5fa71b43da5
- MD5 3a31a536e00bbda7c68efb883945ade7
- SHA1 754fd1d89b020ea4abad29416ff6d8c100b2a86b
- SHA512 39570d762e24a61444528412eb1ac7947e4f7559957511e6e55b93c94301203501b54f87a9bad383b485d1fa77981d2d983ee359021e1dcd54075324cf693cca
- SSDEEP 786432:VJYJLfzT2rZY6GXdmTimawvru7vHC15IEHYt6jwl3/FGhhA2F/dk:VJgLSCXdGpvrem5EGwB/whhA2ddk
- TLSH
  T1CCB733A1DE106844DCAB4F332AE7F1F014985E09679CA62995CEFFD777312222637E90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  libbrotlicommon.dll
- Size 192KB
- SHA256 354a685ad12e3593f8bca1292f7e9ad4bc806158e3574e3845d83754295ef344
- MD5 abc26bedad3dc61ea81d0e1133cbe0c0
- SHA1 247e56696e23ea4e70fb8ea5da78faba26ed0add
- SHA512 c115b1f0bc639d4c99fd2d860ce01be4b89ca77618b900a2969bb1bf59f3a59cb44db4f884ec66da363d225a2db6cc0ca1f3ed55104db676fa7797b71854fe27
- SSDEEP 3072:C2s4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBvziUz35Zx:Cv4AhdNorGvHdbi09GJlOKx
- TLSH
  T195146962B305A777C65B0635E4671738F335C03163460AD3B86A017D2F83EE89B3B69A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  tests.exe
- Size 29.4MB
- SHA256 892a8002fdcc36d973e3d39813f09d99a3ff0d29c8f487d822e32c9a70bbf041
- MD5 5455a04f796509ae88314978cb0f007f
- SHA1 eb81b63662b14c467ac60706d25429a3f0d3c2c1
- SHA512 f28ebef476a0bae8f25acd548f4a2424348a673d8dfcd4048322196106329fb689123e7ced505d90c1138ecd7fe0cb9d546332b4a8a2099ea94526e2e92cfa63
- SSDEEP 196608:5scah0YjYTZAx7H2Ob601wujL1PAdWc9HFC4REzjQCMRGVWFzw6SSV:5scOH2GaujJPRcFFxWz8ZzwjS
- TLSH
  T1BB677D0BF283A5DAD42EC1B497165321FA31BC6647243ADB19A09B201F79FD46F3DB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  uninst.exe
- Size 622KB
- SHA256 a743dcc5fa94249218ce923132c3d53386ba73eb2f4eb7d13bd34fec04ee0bae
- MD5 d83ed130650087f8b562d963a2b691d3
- SHA1 514af90bcf04084c1287db46da7d51faf73e14ef
- SHA512 d878643681806ebe359363f3228772daf2067c223c2e47dcdfe5d8d71528d6d137a10bc593c02c854615a94ce0bbcdc14c42aa8d2a191f414b0b2d6c03633103
- SSDEEP 6144:es8N+i5ZT2C4Jaz+O8Vudx2MrdVl0sN+eUr/Y:evZqnOSMrbl/AeUDY
- TLSH
  T1F2D47CD1DF4054E5EDA60B338692FAB121322D262E24F12EA5D07EE33F355D36A36D06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion
- Deletes itself
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral4