Resubmissions

02-03-2020 16:48

200302-yzy1f7p3ns 10

12-02-2020 16:43

200212-6g1ertszn6 10

15-11-2019 07:22

191115-3jmhn899me 0

General

  • Target

    azorult.exe

  • Size

    828KB

  • Sample

    200212-6g1ertszn6

  • MD5

    0c77b6f095bbc4d470f79cc7aa9bd864

  • SHA1

    20d104338a02d32b08da41290e633f7167807cac

  • SHA256

    b219b1a4ce213036313ffc366e1bcfda433bf68b996c250819181b08701494bd

  • SHA512

    6e14d83ba5bc70317d69305d051be70a63fcef642c049bc1787247c9a4afc418217ab316698fc3387b46df3fb1fab157a64583bca3dba09b8dd3cbbc9d177340

Malware Config

Extracted

Family

azorult

C2

http://waresystem.com/index.php

Targets

    • Target

      azorult.exe

    • Size

      828KB

    • MD5

      0c77b6f095bbc4d470f79cc7aa9bd864

    • SHA1

      20d104338a02d32b08da41290e633f7167807cac

    • SHA256

      b219b1a4ce213036313ffc366e1bcfda433bf68b996c250819181b08701494bd

    • SHA512

      6e14d83ba5bc70317d69305d051be70a63fcef642c049bc1787247c9a4afc418217ab316698fc3387b46df3fb1fab157a64583bca3dba09b8dd3cbbc9d177340

    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks