General

  • Target
    SecuriteInfo.com.MSIL.GenKryptik.EKGR.13047
  • Size 454KB
  • Sample201109-dcpp5hmg2e
  • SHA256 b4ecc0c3ee4f0c96dabac652a849d748ffca834225f70da8d7bb81e234a54834
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • azorult

C2
  • http://195.245.112.115/index.php

Targets

    • Target
      SecuriteInfo.com.MSIL.GenKryptik.EKGR.13047
    • Size 454KB
    • SHA256 b4ecc0c3ee4f0c96dabac652a849d748ffca834225f70da8d7bb81e234a54834
    • MD5 SHA1 SHA512
    • Azorult

      An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks