General
- Target SecuriteInfo.com.MSIL.GenKryptik.EKGR.13047
- Size 454KB
- Sample201109-dcpp5hmg2e
- SHA256 b4ecc0c3ee4f0c96dabac652a849d748ffca834225f70da8d7bb81e234a54834
- MD5 6d7d5a9b177094e127bf489796605593
- SHA1 f978415bde607550f37326820bafbcfc398645d1
- SHA512 4aab76dc4ffab9a69c6ed57d1a8f85599d5f6e2af395fa37af0aba1381b6b8bcbdd1a1351f76d139d08258dd6c1fac217c03b27cf51c6f1b8d5a28dfb47501fa
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.MSIL.GenKryptik.EKGR.13047.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.MSIL.GenKryptik.EKGR.13047.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
azorult
C2
-
http://195.245.112.115/index.php
Targets
-
- Target SecuriteInfo.com.MSIL.GenKryptik.EKGR.13047
- Size 454KB
- SHA256 b4ecc0c3ee4f0c96dabac652a849d748ffca834225f70da8d7bb81e234a54834
- MD5 6d7d5a9b177094e127bf489796605593
- SHA1 f978415bde607550f37326820bafbcfc398645d1
- SHA512 4aab76dc4ffab9a69c6ed57d1a8f85599d5f6e2af395fa37af0aba1381b6b8bcbdd1a1351f76d139d08258dd6c1fac217c03b27cf51c6f1b8d5a28dfb47501fa
- MD5 SHA1 SHA512
Score10/10-
Azorult
An information stealer that was first discovered in 2016, targeting browsing history and passwords.
-
Suspicious use of SetThreadContext